Isaca Exam CGEIT Topic 3 Question 68 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 68
Topic #: 3

An audit report has revealed that data scientists are analyzing sensitive "big data" files using an offsite cloud because corporate servers do not have the necessary processing capabilities. A review of policies indicates this practice is not prohibited. Which of the following should be the FIRST strategic action to address the report?

AAuthorize a risk analysis of the practice.

BUpdate data governance practices.

CRevise the information security policy.

DRecommend the use of a private cloud.

Show Suggested Answer

Suggested Answer: A

by Cecily at Feb 09, 2024, 08:48 AM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shannon

23 days ago

Oh, big data on the cloud? That's like letting the cat out of the bag, if you ask me. Better tighten up that security policy, pronto!

upvoted 0 times

Carmelina

5 days ago

B) Update data governance practices.

upvoted 0 times

...

Jenifer

17 days ago

A) Authorize a risk analysis of the practice.

upvoted 0 times

...

Royce

1 months ago

Hold up, why aren't they just using the private cloud option? That's a no-brainer, D all the way!

upvoted 0 times

Norah

5 days ago

They should definitely consider the private cloud option.

upvoted 0 times

...

Maile

1 months ago

Interesting scenario. I think option B is the way to go - updating the data governance practices could help ensure proper controls are in place for sensitive data.

upvoted 0 times

Barney

10 days ago

B) Update data governance practices.

upvoted 0 times

...

Cletus

29 days ago

A) Authorize a risk analysis of the practice.

upvoted 0 times

...

Miesha

1 months ago

Ooh, this is a tough one. I'm leaning towards C - revising the information security policy seems like the most proactive approach to address the issue.

upvoted 0 times

...

Felice

1 months ago

I think updating data governance practices could also help address the issue.

upvoted 0 times

...

Zona

1 months ago

I agree with Vilma, it's important to assess the risks first.

upvoted 0 times

...

Chantell

2 months ago

Hmm, the report sounds concerning. I'd go with option A - a risk analysis is crucial to understand the potential impact and determine the best course of action.

upvoted 0 times

Stevie

8 hours ago

That sounds like a good idea. We need to assess the risks before making any decisions.

upvoted 0 times

...

Osvaldo

14 days ago

A) Authorize a risk analysis of the practice.

upvoted 0 times

...

Vilma

2 months ago

We should authorize a risk analysis of the practice.

upvoted 0 times

...