Certified in the Governance of Enterprise IT (CGEIT) — Question 198

To ensure that information can be traced to the originating event and accountable parties, an enterprise should FIRST:

Answer options

• A. improve business process controls.
• B. capture source information and supporting evidence.
• C. review information event logs for potential incidents.
• D. review retention requirements for source information.

Correct answer: B

Explanation

Answer B is correct because capturing source information and supporting evidence is essential for traceability and accountability. The other options, while important, do not directly address the foundational step of gathering evidence that links data to its origin.