CIA Information Governance and Maintenance 3 — Questions and Answers
Question 1: A regulated financial firm must retain transaction records for seven years per SEC Rule 17a-4. Which governance process ensures this requirement is operationalized?
- Data classification
- Records retention schedule enforcement (Correct answer)
- Master data synchronization
- Data lineage tracking
Correct answer: Records retention schedule enforcement
Records retention schedule enforcement translates regulatory retention periods into automated or procedural controls applied to specific data sets.
Question 2: Which ISO standard provides guidance specifically on managing information as an asset and supports information governance frameworks?
- ISO 27001
- ISO 8000 (Correct answer)
- ISO 9001
- ISO 31000
Correct answer: ISO 8000
ISO 8000 defines requirements for data quality and the exchange of master data, directly supporting information asset governance.
Question 3: In a federated data governance model, which characteristic distinguishes it from a centralized model?
- A single CDO makes all data decisions
- Business units retain local data authority within enterprise-wide policy guardrails (Correct answer)
- All data is stored in one central repository
- Only IT staff can define data standards
Correct answer: Business units retain local data authority within enterprise-wide policy guardrails
Federated governance delegates domain-level decisions to business units while a central body enforces shared standards and policies.
Question 4: What is data provenance in the context of information governance?
- The geographic location where data is stored
- The documented history of data origin, movement, and transformation (Correct answer)
- The encryption algorithm applied to sensitive data
- The business unit that funded the data collection
Correct answer: The documented history of data origin, movement, and transformation
Data provenance records where data originated and how it has been transformed, enabling trust, auditability, and compliance verification.
Question 5: An organization is implementing a data catalog. Which governance benefit does the catalog primarily deliver?
- Faster database query execution
- Improved discoverability and understanding of enterprise data assets (Correct answer)
- Reduced cloud storage costs
- Automated data backup scheduling
Correct answer: Improved discoverability and understanding of enterprise data assets
A data catalog enables users to find, understand, and trust data assets by centralizing metadata, ownership, and lineage information.
Question 6: Which governance principle requires that data policies be enforced consistently regardless of which department or system holds the data?
- Data minimization
- Policy universality (Correct answer)
- Data sovereignty
- Information symmetry
Correct answer: Policy universality
Policy universality ensures that the same governance rules apply enterprise-wide, preventing siloed exceptions that undermine data integrity.
Question 7: A Chief Data Officer wants to establish accountability for customer data across five regional subsidiaries. Which governance structure is most appropriate?
- Assigning a single global data custodian for all regions
- Creating a cross-regional data stewardship network with local stewards reporting to a global council (Correct answer)
- Letting each subsidiary define its own independent governance rules
- Centralizing all customer data into one database managed by IT
Correct answer: Creating a cross-regional data stewardship network with local stewards reporting to a global council
A stewardship network balances local knowledge with global consistency, ensuring accountability at both the regional and enterprise levels.
CIA Information Governance and Maintenance 3
A regulated financial firm must retain transaction records for seven years per SEC Rule 17a-4.
Which governance process ensures this requirement is operationalized?