IGP Technology & Information Security 4

Question 1

What is the main purpose of a records retention schedule in relation to information security?

Accepted Answer

Specify how long records must be kept and when they should be destroyed

Answer

A records retention schedule defines required retention periods for each record type and the authorized disposition method, supporting both legal compliance and data minimization.

Question 2

Which cloud deployment model provides dedicated infrastructure for a single organization, offering the highest level of control and security?

Accepted Answer

Private cloud

Answer

A private cloud provides cloud infrastructure exclusively for one organization, giving maximum control over security configurations and data isolation.

Question 3

An IGP professional reviewing a vendor contract should ensure which security clause is included to address data handling after contract termination?

Accepted Answer

Data return and destruction provisions

Answer

Data return and destruction provisions ensure that the vendor returns or securely destroys all organizational data once the contract ends, preventing residual data exposure.

Question 4

Which framework provides a risk-based approach to managing cybersecurity that is widely used as a voluntary standard in the US?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST Cybersecurity Framework provides a voluntary, risk-based framework organized around five functions (Identify, Protect, Detect, Respond, Recover) for managing cybersecurity risk.

Question 5

What does the concept of 'data sovereignty' mean in information governance?

Accepted Answer

Data is subject to the laws of the country where it is physically stored or processed

Answer

Data sovereignty means that data is governed by the legal jurisdiction of the country where it resides or is processed, affecting cross-border transfer rules.

(IGP) Information Governance Professional Practice Test

(IGP) Information Governance Professional Practice Test

IGP Technology & Information Security 4