CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ297

Risk Optimization

A business is considering adopting a policy to anonymize personal data in enterprise systems. Before deciding, which of the following is MOST important for the IT steering committee to consider?

  • A Regulatory requirements
  • B Sustainability costs to the enterprise
  • C Potential implementation barriers
  • D Business impact analysis (BIA) results
Explanation

Applicable regulatory requirements are the primary consideration because privacy and data-protection laws may mandate anonymization or impose specific standards for handling personal data. These obligations define the organization’s compliance baseline before cost, implementation, or continuity impacts are evaluated.

Community Discussion

No comments yet. Be the first to start the discussion!