IGP Cheat Sheet 2026

The 30 highest-yield IGP facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which records management principle holds that records of the same origin should not be mixed with records from other origins? → Provenance (respect des fonds)
2. A data protection impact assessment (DPIA) under GDPR is mandatory when processing is likely to result in: → High risk to the rights and freedoms of natural persons
3. What is the PRIMARY purpose of obtaining IGP certification in Information Governance Professional? → To demonstrate verified competency and adherence to professional standards
4. How does information governance impact data privacy? → Protects personal and sensitive data
5. Which approach is MOST important for IGP professionals when applying technical procedures? → Adhering to established protocols while adapting to specific conditions
6. In Information Governance Professional practice, what is the FIRST step when a safety hazard is identified in the workplace? → Immediately secure the area and report the hazard
7. What is the purpose of compliance in information governance? → Ensure adherence to laws and policies
8. What is the main goal of records management? → Control creation, maintenance, disposal
9. How does encryption support data privacy? → Protects against unauthorized access
10. Why is data privacy critical in records management? → Protect sensitive information
11. In Information Governance Professional practice, what is the CORRECT sequence when performing a technical procedure? → Plan, prepare, execute, verify, and document
12. What must an organization do to its records retention schedules when a litigation hold is issued? → Suspend the normal retention and disposition schedule for records covered by the hold
13. The Sarbanes-Oxley Act (SOX) Section 302 primarily requires: → CEO and CFO certification of financial statement accuracy
14. In information governance, what does a Data Loss Prevention (DLP) system primarily do? → Monitors and restricts unauthorized transfer of sensitive data
15. In Information Governance Professional, what is the PRIMARY purpose of conducting regular safety drills and exercises? → To ensure personnel can respond effectively in emergencies
16. Under NIST SP 800-53, which control family addresses audit and accountability requirements? → Audit and Accountability (AU)
17. What role does documentation play in compliance? → Evidence of policy adherence
18. Which concept describes the practice of granting users only the minimum access rights necessary to perform their job functions? → Least privilege
19. In an IG framework, a 'policy' differs from a 'procedure' primarily because a policy: → States the organization's intent and high-level rules
20. How does multi-factor authentication enhance security? → Requires multiple verification methods
21. When a IGP professional identifies a potential regulatory violation, the CORRECT first step is to: → Document the violation and report through proper channels
22. What is a retention schedule? → Defines record retention time
23. What is the role of governance in risk management? → Set policies and oversight
24. What is a common cause of data breaches? → Weak passwords and phishing
25. A retention schedule assigns a seven-year retention period to financial records. When does the retention clock typically begin? → The date the record was filed or closed
26. What role does calibration play in maintaining technical accuracy for Information Governance Professional professionals? → It ensures instruments produce accurate, consistent results over time
27. In risk management, the term 'residual risk' refers to: → Risk remaining after controls have been applied
28. A company discovers that a third-party vendor has been improperly handling customer PII. Under a risk management framework, this is best classified as: → Third-party/supply chain risk
29. Which personal protective equipment (PPE) principle applies to ALL IGP certified professionals regardless of their specific role? → PPE must be properly fitted, maintained, and replaced as needed
30. What is the MOST effective way for new IGP professionals to build competency? → Combining formal education, mentored practice, and ongoing professional development