Which of the following would be of MOST concern regarding the effectiveness of risk management processes?

1. A. Key risk indicators (KRIs) are not established.
2. B. Risk management requirements are not included in performance reviews.
3. C. The plans and procedures are not updated on an annual basis.
4. D. There is no framework to ensure effective reporting of risk events.

Correct Answer: A

Which aspect of information governance BEST enables an enterprise to avoid duplication of records and promote consistency of data?

1. A. Data loss prevention (DLP)
2. B. Data modeling
3. C. Blockchain management
4. D. Enterprise architecture (EA)

Correct Answer: B

An IT strategy committee wants to ensure that a risk program is successfully implemented throughout the enterprise. Which of the following would BEST support this goal?

1. A. A risk management framework
2. B. Mandatory risk awareness courses for staff
3. C. A risk recognition and reporting policy
4. D. Commitment from senior management

Correct Answer: D

An airline wants to launch a new program involving the use of artificial intelligence (Al) and machine learning The mam objective of the program is to use customer behavior to determine new routes and markets Which of the following should be done NEXT?

1. A. Consult with the enterprise privacy function
2. B. Define the critical success factors (CSFs)
3. C. Present the proposal to the IT strategy committee
4. D. Perform a business impact analysis (BIA)

Correct Answer: A

An enterprise has a zero-tolerance policy regarding security. This policy is causing a large number of email attachments to be blocked and is a disruption to enterprise. Which of the following should be the FIRST governance step to address this email issue?

1. A. Direct the development of an email usage policy.
2. B. Obtain senior management input based on identified risk.
3. C. Recommend business sign-off on the zero-tolerance policy.
4. D. Introduce an exception process.

Correct Answer: B