IGP Information Governance Framework & Policies 2

Question 1

Which standard provides a globally recognized framework specifically for information security management systems (ISMS)?

Accepted Answer

ISO/IEC 27001

Answer

ISO/IEC 27001 is the international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an ISMS.

Question 2

In an IG framework, a 'policy' differs from a 'procedure' primarily because a policy:

Accepted Answer

States the organization's intent and high-level rules

Answer

Policies express organizational intent and mandatory rules, while procedures provide the step-by-step instructions for implementing those policies.

Question 3

The ARMA International Generally Accepted Recordkeeping Principles (GARP) include how many core principles?

Accepted Answer

8

Answer

ARMA's GARP framework consists of 8 core principles: Accountability, Transparency, Integrity, Protection, Compliance, Availability, Retention, and Disposition.

Question 4

When developing an IG policy for email, which element is MOST critical to include to ensure legal defensibility?

Accepted Answer

Retention schedule aligned with legal holds and regulations

Answer

A legally defensible email policy must include retention schedules that align with applicable regulations and the organization's legal hold obligations.

Question 5

Which governance body is typically responsible for approving enterprise-level IG policies?

Accepted Answer

Executive leadership or a steering committee

Answer

Enterprise IG policies require approval at the executive or steering committee level to ensure enterprise-wide authority and cross-departmental compliance.

(IGP) Information Governance Professional Practice Test

(IGP) Information Governance Professional Practice Test

IGP Information Governance Framework & Policies 2