A data governance strategy has been defined by the IT strategy committee which includes privacy objectives related to access controls, authorized use, and data collection. Which of the following should the committee do NEXT?

A. Mandate the creation of a data privacy policy.

B. Establish a data privacy budget.

C. Perform a data privacy impact assessment.

D. Mandate data privacy training for employees.








 

Suggested Answer: A





This question is in CGEIT Certified in the Governance of Enterprise IT Exam
For getting Certified in the Governance of Enterprise IT (CGEIT) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.