Mixed Deck — All IGP Topics Flashcards

Which personal protective equipment (PPE) principle applies to ALL IGP certified professionals regardless of their specific role?

Answer: PPE must be properly fitted, maintained, and replaced as needed

Regardless of experience level, PPE must be properly fitted, regularly maintained, and replaced when worn or damaged.

What role does calibration play in maintaining technical accuracy for Information Governance Professional professionals?

Answer: It ensures instruments produce accurate, consistent results over time

Regular calibration ensures instruments continue producing accurate results over time.

In Information Governance Professional, what is the PRIMARY purpose of conducting regular safety drills and exercises?

Answer: To ensure personnel can respond effectively in emergencies

Regular safety drills ensure that all personnel are prepared to respond effectively during actual emergencies.

What is the primary purpose of an information governance framework?

Answer: Manage information securely and effectively

The primary purpose of an information governance (IG) framework is to manage an organization's information assets securely, effectively, and compliantly throughout their lifecycle. It establishes policies, processes, and controls to ensure information is accurate, accessible, protected, and retained or disposed of appropriately. This holistic approach maximizes information value while minimizing risks and costs.

What is the PRIMARY purpose of obtaining IGP certification in Information Governance Professional?

Answer: To demonstrate verified competency and adherence to professional standards

Certification demonstrates verified competency and adherence to professional standards.

What is the role of governance in risk management?

Answer: Set policies and oversight

Governance in risk management involves establishing the framework, policies, and oversight necessary to effectively manage risks across the organization. It sets the strategic direction, defines roles and responsibilities, and ensures that risk management activities are aligned with organizational objectives. Effective governance provides the structure and accountability needed for a robust and consistent approach to risk.

Which approach BEST supports continuous improvement of an IG framework over time?

Answer: Establishing ongoing monitoring, periodic audits, and a feedback loop that drives policy revisions

Continuous improvement requires regular audits, monitoring of compliance metrics, and a formal feedback process to update policies as regulations, technology, and business needs evolve.

A Chief Information Governance Officer (CIGO) is MOST responsible for:

Answer: Overseeing the enterprise IG program, ensuring alignment with strategy, and driving policy adoption across business units

The CIGO provides strategic leadership for the enterprise IG program, aligning IG initiatives with organizational objectives and driving cross-functional adoption.

Which factor MOST significantly affects the quality of technical outcomes in IGP practice?

Answer: The practitioner's training, preparation, and attention to detail

Quality depends primarily on training, preparation, and attention to detail.

Under GDPR, which IG principle requires that personal data be kept only as long as necessary for its stated purpose?

Answer: Storage limitation

GDPR's storage limitation principle requires that personal data not be kept longer than necessary for the purposes for which it was collected.

Which standard provides a globally recognized framework specifically for information security management systems (ISMS)?

Answer: ISO/IEC 27001

ISO/IEC 27001 is the international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an ISMS.

The concept of 'information stewardship' in IG frameworks refers to:

Answer: Designated individuals responsible for overseeing the quality and governance of specific data domains

Information stewards are accountable business representatives who oversee the accuracy, accessibility, and appropriate use of information within their domain.

Which of the following is a key characteristic of an effective IG policy lifecycle?

Answer: Policies undergo regular review and updates to reflect regulatory and business changes

Effective IG policies must be periodically reviewed and updated to remain aligned with evolving laws, regulations, business needs, and technology changes.

Why is data privacy critical in records management?

Answer: Protect sensitive information

Data privacy is critical in records management because many records contain sensitive information, including personally identifiable information (PII) or confidential business data. Proper privacy measures ensure that this sensitive information is protected from unauthorized access, use, or disclosure. This is crucial for maintaining trust, complying with regulations like GDPR or HIPAA, and avoiding legal and reputational damage.

Which of the following would be considered a 'defensible disposition' practice in IG?

Answer: Destroying records according to documented retention schedules after confirming no legal holds apply

Defensible disposition requires systematic destruction based on approved retention schedules, with legal hold checks and documented authorization to withstand legal scrutiny.

The Sarbanes-Oxley Act (SOX) Section 302 primarily requires:

Answer: CEO and CFO certification of financial statement accuracy

SOX Section 302 requires senior executives to personally certify the accuracy and completeness of corporate financial reports.

A records retention schedule that conflicts with a legal hold should be:

Answer: Suspended for the records covered by the legal hold until it is lifted

Legal holds override normal retention schedules; records subject to a hold must be preserved until the hold is lifted, regardless of their scheduled destruction date.

Why is employee training important for data privacy?

Answer: Ensures policy understanding

Employee training is crucial for data privacy because human error is a significant cause of data breaches. Training ensures that all employees understand the organization's data privacy policies, their responsibilities, and best practices for handling sensitive information. This knowledge empowers them to make informed decisions, recognize threats like phishing, and act as a strong line of defense against privacy incidents.

Which element distinguishes a 'standard' from a 'policy' in an IG framework hierarchy?

Answer: Standards provide specific, measurable requirements that support policy compliance

Standards define specific, quantifiable requirements (e.g., password length minimums) that operationalize policies, making compliance measurable and auditable.

Which technology helps prevent unauthorized access?

Answer: Access controls such as passwords

Access controls, such as strong passwords, multi-factor authentication, and role-based access, are fundamental technologies that help prevent unauthorized access to systems and data. They ensure that only authenticated and authorized individuals can gain entry to specific resources. By verifying user identities and permissions, these controls act as a critical barrier against malicious actors and insider threats.