CPA Isc Quiz: Evaluate Data Governance Structures

What this quiz covers

This quiz focuses on Evaluate Data Governance Structures, giving you a quick way to practice the rules, question types, and explanations that matter most for CPA Isc.

How to use this quiz

Try each quiz question before looking at the correct answer. Use the explanations to review missed ideas, then come back to similar questions until the pattern feels familiar.

Question 1

1. A framework of policies, processes, roles, and standards that ensure data is managed as a strategic asset with appropriate quality, security, and compliance throughout its lifecycle. (correct answer)
2. The technical process of backing up and restoring organizational data.
3. The IT department's responsibility to manage database performance and storage.
4. A regulatory requirement applicable only to financial institutions.

Explanation: Data governance is an enterprise-wide discipline encompassing policies, roles, accountability, and processes to ensure data is accurate, available, secure, and used appropriately. Answer A is correct. Backup and restore (B) is a technical IT function. Database performance (C) is IT operations. Data governance applies across all industries (D).

Question 2

1. Data governance should be managed exclusively by the IT department to ensure technical consistency.
2. Data governance policies should be kept confidential to prevent misuse.
3. Data governance requires clear accountability - defined roles, responsibilities, and ownership for each data domain across the organization. (correct answer)
4. Data governance is a one-time initiative that is completed when initial policies are published.

Explanation: Effective data governance requires clear, defined accountability for each data domain - who owns it, who stewards it, and who is responsible for its quality and appropriate use. Answer C is correct. Governance requires business and IT collaboration (A). Policies must be communicated to be followed (B). Governance is an ongoing program, not a one-time project (D).

Question 3

1. Encrypting all customer records to prevent further data corruption.
2. Deleting duplicate records without investigation.
3. Restricting access to customer data to senior staff only.
4. A master data management (MDM) initiative that establishes a single authoritative customer record (golden record) synchronized across all systems. (correct answer)

Explanation: MDM creates a single trusted version of key data entities (customers, products) that all systems reference, eliminating the inconsistencies caused by siloed data. Answer D is correct. Encryption (A) protects confidentiality but does not fix data quality. Deleting duplicates without investigation (B) risks losing valid data. Access restriction (C) does not resolve inconsistency.

Question 4

1. Defining which employees are permitted to access specific data domains.
2. Implementing the technical controls for data storage, backup, security, and availability as directed by the data owner. (correct answer)
3. Classifying all organizational data and assigning sensitivity levels.
4. Approving changes to data governance policies.

Explanation: The data custodian (often IT) implements and maintains the technical infrastructure - storage systems, backups, access controls, encryption - that protects and makes data available, acting on the data owner's direction. Answer B is correct. Access decisions (A) are made by data owners. Classification (C) is the data owner's responsibility. Policy approval (D) is a governance committee function.

Question 5

1. Provide ongoing visibility into data quality performance, enabling data owners and stewards to identify and remediate issues before they impact business processes. (correct answer)
2. Satisfy external audit requirements for data quality reporting.
3. Justify the cost of the data governance program to senior management.
4. Determine which employees require additional data management training.

Explanation: A data quality scorecard is a management tool providing continuous measurement of quality metrics, enabling proactive issue identification and remediation. Answer A is correct. External audit requirements (B) are a secondary consideration. Cost justification (C) is a governance activity but not the scorecard's primary purpose. Training needs (D) may be identified but are not the primary purpose.

Question 6

1. It automatically corrects data quality errors as data moves through systems.
2. It encrypts data as it flows between source and target systems.
3. It restricts data movement to approved pathways based on classification level.
4. It documents the origin, movement, transformation, and consumption of data across systems, enabling impact analysis and root cause investigation of data quality issues. (correct answer)

Explanation: Data lineage maps how data flows from source through transformations to final consumption, enabling organizations to trace data quality issues to their source and understand the downstream impact of data changes. Answer D is correct. Automatic error correction (A) is a data quality tool function. Encryption (B) and access control (C) are security functions unrelated to lineage.

Question 7

1. A technical data dictionary that documents database table names, column definitions, and data types.
2. A centralized, authoritative repository of agreed-upon business term definitions, ensuring consistent understanding and use of data across the organization. (correct answer)
3. A list of all software applications that store business data.
4. A regulatory compliance checklist for data-related laws and standards.

Explanation: A business glossary establishes standard definitions for key business terms (e.g., 'revenue,' 'active customer,' 'headcount'), ensuring everyone in the organization uses data consistently and interprets reports the same way. Answer B is correct. A technical data dictionary (A) documents database structure, not business meaning. Application inventories (C) and compliance checklists (D) are separate artifacts.

Question 8

1. The organization has purchased data governance software from a leading vendor.
2. The CIO has delegated all data governance responsibilities to the IT department.
3. Data quality metrics show improvement over time, data issues are resolved within defined SLAs, and business users report increased confidence in data for decision-making. (correct answer)
4. The data governance committee has not needed to meet for six months.

Explanation: Effective data governance produces measurable outcomes: improving data quality, timely issue resolution, and increased user trust in data. Answer C is correct. Software purchase (A) is an input. IT-only governance (B) lacks business accountability. No governance committee meetings (D) suggests inactivity, not effectiveness.

Question 9

1. An efficient process improvement reducing approval delays.
2. An acceptable deviation since IT administrators understand data security requirements.
3. A minor finding since the data owner policy applies only to external requests.
4. A control deficiency - access approval authority was not followed, bypassing the data owner accountability required by the governance policy. (correct answer)

Explanation: The governance policy requires data owner approval specifically because the data owner is accountable for appropriate use. IT administrators approving access without data owner involvement bypasses this accountability structure. Answer D is correct. Efficiency (A) does not justify bypassing governance controls. Technical knowledge (B) does not replace business accountability. The policy applies to all access requests (C).

Question 10

1. Data governance focuses on database administration; data management focuses on strategic direction.
2. Data governance establishes the policies, roles, and accountability framework; data management executes the operational activities of collecting, storing, processing, and using data within that framework. (correct answer)
3. Data governance applies only to structured data; data management applies to all data types.
4. Data governance is an external audit function; data management is an internal IT function.

Explanation: Data governance sets the 'rules of the road' - policies, roles, and oversight. Data management is the operational execution - the day-to-day activities of actually working with data following those rules. Answer B is correct. Governance is strategic, not database administration (A). Both apply to all data types (C). Governance is an internal business function (D).

Question 11

1. Accountability - ensuring data owners regularly attest to the quality of their data domain and take ownership of issues. (correct answer)
2. Availability - ensuring data is accessible to authorized users at all times.
3. Security - ensuring data is protected from unauthorized access.
4. Scalability - ensuring data infrastructure can grow with business needs.

Explanation: Periodic data quality certification makes data owners accountable by requiring them to formally attest to the state of their data, driving proactive issue identification and remediation. Answer A is correct. Availability (B), security (C), and scalability (D) are separate governance and IT management objectives.

Question 12

1. Data custodian
2. Data steward
3. Data owner
4. Chief Privacy Officer (CPO) or Data Protection Officer (DPO), in coordination with data owners. (correct answer)

Explanation: The CPO or DPO brings regulatory privacy expertise (GDPR, CCPA, HIPAA) to ensure privacy requirements are incorporated into data governance policies, working with data owners who are accountable for their domains. Answer D is correct. Custodians (A) implement technical controls. Stewards (B) manage operational quality. Data owners (C) are accountable for their domains but typically rely on privacy experts for regulatory guidance.

Question 13

1. Investigate and report data breaches to regulatory authorities.
2. Manage the organization's data backup and recovery schedule.
3. Provide a structured mechanism for reporting, prioritizing, investigating, and resolving data quality and integrity issues across the organization. (correct answer)
4. Audit the performance of data stewards and data owners.

Explanation: Data issue management gives business users a formal channel to report data problems, ensures issues are tracked and prioritized, and drives timely resolution by accountable parties - a core operational element of data governance. Answer C is correct. Breach reporting (A) is incident management. Backup scheduling (B) is IT operations. Auditing roles (D) is a governance committee function.

Question 14

1. The organization will be unable to purchase new data storage hardware.
2. IT staff will have difficulty managing database technical performance.
3. The organization's data warehouse will become too large to manage.
4. Data quality will deteriorate, trust in data will erode, compliance risks will increase, and the organization will struggle to derive strategic value from its data assets. (correct answer)

Explanation: Without governance, data quality degrades over time, definitions diverge, compliance gaps accumulate, and the organization loses the ability to make confident data-driven decisions - the compounding long-term risk of ungoverned data. Answer D is correct. Hardware purchasing (A), database performance (B), and warehouse size (C) are operational IT concerns not caused by governance absence.

Question 15

1. Delegating all data governance responsibilities to the data steward and taking no further involvement.
2. Reviewing and approving access to financial reporting data, attesting to data quality at period-end, and escalating unresolved data quality issues to the governance committee. (correct answer)
3. Directly managing the IT team's database administration activities.
4. Publishing the financial reporting data specifications on the company intranet.

Explanation: Effective data ownership involves active accountability: controlling access, attesting to quality, and driving resolution of issues - not passive delegation or technical management. Answer B is correct. Full delegation (A) abdicates ownership responsibility. Database administration (C) is the custodian's role. Publishing specifications (D) is useful but insufficient demonstration of ownership.

Question 16

1. Executive sponsorship - senior leadership commitment and accountability for data governance is essential for the program to have the authority, resources, and organizational buy-in needed to succeed. (correct answer)
2. The sophistication of the data governance technology platform.
3. The number of data stewards assigned per data domain.
4. The frequency of data governance committee meetings.

Explanation: Data governance programs fail most often from lack of executive sponsorship - without visible senior leadership commitment and accountability, data governance lacks authority and organizational priority. Answer A is correct. Technology (B), staffing ratios (C), and meeting frequency (D) are important but secondary to executive commitment.

Question 17

1. Replace the internal audit function's role in data quality oversight.
2. Manage the daily operations of all databases across the organization.
3. Develop the organization's enterprise resource planning (ERP) system.
4. Provide oversight and strategic direction for data governance initiatives, resolve cross-functional data issues, and ensure data policies align with organizational objectives. (correct answer)

Explanation: A data governance committee is a cross-functional oversight body that provides strategic direction, resolves conflicts, approves policies, and ensures alignment between data management practices and business strategy. Answer D is correct. It supplements, not replaces, internal audit (A). Daily operations (B) are management and IT functions. ERP development (C) is a project management activity.

Question 18

1. The principle that data is subject to the laws and regulations of the country or jurisdiction where it is stored or processed, affecting data residency and cross-border transfer decisions. (correct answer)
2. The right of the organization to own all data generated by its employees.
3. The technical capability of an organization to control access to its own data.
4. The requirement that data governance policies be approved by the sovereign government.

Explanation: Data sovereignty means that data is governed by the legal jurisdiction in which it resides - impacting decisions about where data can be stored, who can access it, and what transfers are permissible across borders. Answer A is correct. Employee data ownership (B) is a separate employment law concept. Technical access control (C) is data security. Government policy approval (D) is not the meaning of data sovereignty.

Question 19

1. The IT department encrypts all sensitive data at rest.
2. A data steward resolves a data quality issue within the defined SLA.
3. Multiple business units maintain separate, inconsistent definitions of 'active customer,' resulting in conflicting financial reports and business decisions. (correct answer)
4. The data governance committee meets quarterly to review data quality metrics.

Explanation: Inconsistent data definitions across business units is a classic data governance failure - without a common business glossary and data standards, the same metric produces different results in different systems, undermining decision-making. Answer C is correct. Encryption (A), timely issue resolution (B), and committee oversight (D) are positive governance activities.

Question 20

1. Automatically encrypt all data assets discovered during catalog creation.
2. Provide a searchable inventory of data assets across the organization, including metadata, data lineage, classification, and ownership information. (correct answer)
3. Replace the organization's data warehouse with a more flexible data storage solution.
4. Generate compliance reports for regulatory submissions.

Explanation: A data catalog is an organized inventory of data assets that enables users to discover, understand, and access data - documenting what data exists, where it lives, what it means, who owns it, and how it flows. Answer B is correct. Encryption (A), storage replacement (C), and compliance reporting (D) are not data catalog functions.