IGP Information Governance Framework & Policies 4

Question 1

In the context of IG frameworks, 'accountability' means that:

Accepted Answer

A senior executive or designated officer is responsible for the IG program and its outcomes

Answer

Accountability requires that a senior executive or designated officer take ownership of the IG program, ensuring it is resourced, enforced, and aligned with organizational goals.

Question 2

Which of the following is a key characteristic of an effective IG policy lifecycle?

Accepted Answer

Policies undergo regular review and updates to reflect regulatory and business changes

Answer

Effective IG policies must be periodically reviewed and updated to remain aligned with evolving laws, regulations, business needs, and technology changes.

Question 3

A company's IG framework should address privacy requirements under which US federal law applicable to healthcare information?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) governs the privacy and security of protected health information (PHI) and must be addressed in healthcare IG frameworks.

Question 4

What is the primary purpose of an IG policy exception process?

Accepted Answer

To provide a controlled, documented mechanism for temporarily deviating from a policy when business needs require it

Answer

An exception process allows documented, risk-assessed deviations from policy when strict adherence is impractical, maintaining governance while accommodating legitimate business needs.

Question 5

Which element distinguishes a 'standard' from a 'policy' in an IG framework hierarchy?

Accepted Answer

Standards provide specific, measurable requirements that support policy compliance

Answer

Standards define specific, quantifiable requirements (e.g., password length minimums) that operationalize policies, making compliance measurable and auditable.

(IGP) Information Governance Professional Practice Test

(IGP) Information Governance Professional Practice Test

IGP Information Governance Framework & Policies 4