CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ95

Risk Optimization

A health technology enterprise wants to ensure that its internally developed mobile application for users complies with data privacy regulations. Which of the following should be identified FIRST when creating an inventory of information systems and data associated with the mobile application?

  • A Vendors and outsourced systems
  • B Data maintained by vendors
  • C Information classification scheme
  • D Application and data owners
Explanation

Application and data owners are accountable for identifying and validating the systems, data repositories, processing activities, classifications, and third parties associated with the mobile application. Establishing those owners first provides the responsibility needed to create and maintain an accurate inventory.

Community Discussion

No comments yet. Be the first to start the discussion!