CGEIT: Certified in the Governance of Enterprise IT

By Isaca · Question Mode

QuestionQ95

VerifiedRisk Optimization

A health technology enterprise wants to ensure that its internally developed mobile application for users complies with data privacy regulations. Which of the following should be identified FIRST when creating an inventory of information systems and data associated with the mobile application?

Explanation

Application and data owners are accountable for identifying and validating the systems, data repositories, processing activities, classifications, and third parties associated with the mobile application. Establishing those owners first provides the responsibility needed to create and maintain an accurate inventory.

Community Discussion

No comments yet. Be the first to start the discussion!