Information Governance Framework & Policies Flashcards

Which of the following BEST describes the purpose of a data classification policy?

Answer: To assign sensitivity levels to information to guide handling and protection requirements

Data classification policies assign sensitivity tiers (e.g., Public, Internal, Confidential, Restricted) to information so appropriate controls can be applied.

Which framework is commonly used to align IT governance with business objectives and includes information governance components?

Answer: COBIT

COBIT (Control Objectives for Information and Related Technologies) is a framework for IT governance and management that includes information governance components.

An information governance maturity model is primarily used to:

Answer: Assess and benchmark the sophistication of an organization's IG program over time

Maturity models provide a structured way to assess where an organization's IG program stands and chart a path for continuous improvement.

Which scenario BEST illustrates a failure of IG policy enforcement?

Answer: A manager approves deletion of records still under a legal hold

Deleting records subject to a legal hold violates IG policy and can result in spoliation sanctions, making it a clear enforcement failure.

The concept of 'information stewardship' in IG frameworks refers to:

Answer: Designated individuals responsible for overseeing the quality and governance of specific data domains

Information stewards are accountable business representatives who oversee the accuracy, accessibility, and appropriate use of information within their domain.

Which policy element defines the consequences for employees who violate IG requirements?

Answer: Enforcement and sanctions clause

The enforcement and sanctions clause specifies disciplinary actions that may result from policy violations, making the policy credible and actionable.

A records retention schedule that conflicts with a legal hold should be:

Answer: Suspended for the records covered by the legal hold until it is lifted

Legal holds override normal retention schedules; records subject to a hold must be preserved until the hold is lifted, regardless of their scheduled destruction date.