CIP Information Governance and Strategy 4

Question 1

Which role is typically responsible for defining IG policies across an entire enterprise?

Accepted Answer

Chief Information Governance Officer (CIGO) or equivalent executive

Answer

Enterprise-wide IG policy authority rests with a senior governance executive who can mandate compliance across business units.

Question 2

The concept of 'defensible disposition' in records management means:

Accepted Answer

Destroying records according to a documented, consistently applied retention schedule

Answer

Defensible disposition demonstrates that record destruction followed a lawful, documented, and consistently applied process — not selective deletion.

Question 3

A company stores customer PII in three different countries. Which IG consideration becomes most complex?

Accepted Answer

Cross-border data transfer restrictions and differing national privacy laws

Answer

Multi-jurisdictional data storage triggers varying national laws (e.g., GDPR, China's PIPL) that may conflict regarding transfers and retention.

Question 4

In IG strategy development, a RACI matrix is used to:

Accepted Answer

Assign Responsible, Accountable, Consulted, and Informed roles for governance tasks

Answer

A RACI matrix clarifies who performs, owns, advises, and receives updates for each IG activity, eliminating role ambiguity.

Question 5

Which of the following is an example of an 'information governance policy' rather than an 'information governance procedure'?

Accepted Answer

'All confidential records must be encrypted at rest and in transit.'

Answer

A policy states a high-level rule or requirement; procedures describe step-by-step instructions for implementing that rule.

(CIP) Certified Information Professional Practice Test