CGEIT Question 16

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Well, performing an assessment might be more effective once there is a clear policy in place that defines the privacy objectives and requirements; hence, they rule it as "A" first. But I personally think we still need to know where we stand before creating some kind of base

• 1

  But, then again, of course the committee will not perform the assessment themselves. They mandate, they request. So there it is. They mandate policy creation that will require some kind of assessment first

• 1

  You need to know what you are now and where you need to be in x Years. So they must do a Impact Assessment.