According to the ISACA AAIA™ Study Guide, a " Data Governance Framework " is the foundational control. It provides the policies, roles (stewards, owners), and standards necessary to manage the entire data lifecycle. Without a framework, activities like inventorying (Option C) or labeling (Option D) are ad-hoc and lack accountability. A formal framework ensures that data management is consistent, compliant with privacy laws, and aligned with the organization’s risk tolerance. It is the " enabling " control that makes all other data quality and security metrics meaningful and enforceable.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit