IGP Cheat Sheet 2026

The 30 highest-yield IGP facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is the PRIMARY purpose of obtaining IGP certification in Information Governance Professional? → To demonstrate verified competency and adherence to professional standards
2. How does information governance impact data privacy? → Protects personal and sensitive data
3. Which approach is MOST important for IGP professionals when applying technical procedures? → Adhering to established protocols while adapting to specific conditions
4. In Information Governance Professional practice, what is the FIRST step when a safety hazard is identified in the workplace? → Immediately secure the area and report the hazard
5. What is the purpose of compliance in information governance? → Ensure adherence to laws and policies
6. What is the main goal of records management? → Control creation, maintenance, disposal
7. How does encryption support data privacy? → Protects against unauthorized access
8. Why is data privacy critical in records management? → Protect sensitive information
9. In Information Governance Professional practice, what is the CORRECT sequence when performing a technical procedure? → Plan, prepare, execute, verify, and document
10. The Sarbanes-Oxley Act (SOX) Section 302 primarily requires: → CEO and CFO certification of financial statement accuracy
11. In information governance, what does a Data Loss Prevention (DLP) system primarily do? → Monitors and restricts unauthorized transfer of sensitive data
12. In Information Governance Professional, what is the PRIMARY purpose of conducting regular safety drills and exercises? → To ensure personnel can respond effectively in emergencies
13. What role does documentation play in compliance? → Evidence of policy adherence
14. Which concept describes the practice of granting users only the minimum access rights necessary to perform their job functions? → Least privilege
15. In an IG framework, a 'policy' differs from a 'procedure' primarily because a policy: → States the organization's intent and high-level rules
16. How does multi-factor authentication enhance security? → Requires multiple verification methods
17. When a IGP professional identifies a potential regulatory violation, the CORRECT first step is to: → Document the violation and report through proper channels
18. What is a retention schedule? → Defines record retention time
19. What is the role of governance in risk management? → Set policies and oversight
20. What is a common cause of data breaches? → Weak passwords and phishing
21. What role does calibration play in maintaining technical accuracy for Information Governance Professional professionals? → It ensures instruments produce accurate, consistent results over time
22. In risk management, the term 'residual risk' refers to: → Risk remaining after controls have been applied
23. A company discovers that a third-party vendor has been improperly handling customer PII. Under a risk management framework, this is best classified as: → Third-party/supply chain risk
24. Which personal protective equipment (PPE) principle applies to ALL IGP certified professionals regardless of their specific role? → PPE must be properly fitted, maintained, and replaced as needed
25. What is the MOST effective way for new IGP professionals to build competency? → Combining formal education, mentored practice, and ongoing professional development
26. Which personal protective equipment (PPE) principle applies to ALL IGP certified professionals regardless of their specific role? → PPE must be properly fitted, maintained, and replaced as needed
27. What role does risk management play in information governance? → Identify and mitigate risks
28. Which risk management approach is MOST effective for IGP professionals when evaluating potential workplace hazards? → Proactive hazard identification and assessment
29. How are controls used in risk management? → Reduce risk likelihood or impact
30. Which framework is commonly used to align IT governance with business objectives and includes information governance components? → COBIT