Certified in the Governance of Enterprise IT (CGEIT) — Question 203

A business is considering a policy to anonymize personal data in enterprise systems. Before making a decision, which of the following is MOST important for the
IT steering committee to consider?

Answer options

• A. Regulatory requirements
• B. Sustainability costs to the enterprise
• C. Potential implementation barriers
• D. Business impact analysis (BIA) results

Correct answer: A

Explanation

The most crucial factor for the IT steering committee to consider is the regulatory requirements, as compliance with laws protecting personal data is mandatory. While sustainability costs, implementation barriers, and BIA results are important, they do not carry the same legal implications as ensuring compliance with regulations.