CIP Information Governance and Strategy 5

Question 1

Which of the following scenarios represents an IG 'information risk' rather than an IT security risk?

Accepted Answer

Retaining employee records 10 years beyond their mandated destruction date

Answer

Over-retention is an information governance risk — it increases legal exposure and storage cost — whereas the other options are cybersecurity incidents.

Question 2

The principle of 'minimum necessary' in information governance means:

Accepted Answer

Collecting and retaining only the information actually needed for a specified purpose

Answer

The minimum necessary principle limits data collection and retention to what is required, reducing risk and compliance burden.

Question 3

A 'taxonomy' in information management is best described as:

Accepted Answer

A hierarchical classification scheme for organizing information into categories

Answer

A taxonomy is a structured hierarchy of categories used to classify and organize information consistently across an organization.

Question 4

Which factor most often causes IG programs to fail after initial implementation?

Accepted Answer

Lack of sustained executive sponsorship and organizational culture change

Answer

IG requires ongoing leadership commitment and behavior change; without executive sponsorship, programs stall once initial momentum fades.

Question 5

Under the EU General Data Protection Regulation (GDPR), the 'right to erasure' (right to be forgotten) most directly impacts which IG process?

Accepted Answer

Records disposition and deletion workflows

Answer

The right to erasure requires organizations to delete personal data on request, demanding that disposition processes can locate and remove specific records.

(CIP) Certified Information Professional Practice Test

(CIP) Certified Information Professional Practice Test

CIP Information Governance and Strategy 5