According to the CGEIT certification guide, the best method for determining an enterprise's current appetite for risk is interviewing senior management. This is because senior management is responsible for setting the risk appetite and tolerance of the enterprise, and for balancing the security and business needs. The risk appetite reflects the amount and type of risk that an organization is willing to take in order to meet their strategic objectives. Interviewing senior management can help to understand their perspectives, expectations, and preferences regarding risk taking1. The other options are less effective than option A, as they do not directly capture the senior management's input or risk-based decision making. Reference:= CGEIT certification guide, domain 3: Risk Optimization, section 3.1: Risk Governance, page 87.

An information steward is a person who is responsible for ensuring the quality, accuracy, consistency, and usability of the data in an organization. An information steward works with the business users and stakeholders to understand their data needs, requirements, and expectations, and to define and implement the data policies, standards, and rules that govern the data lifecycle. An information steward also monitors and reports on the data quality issues and trends, and initiates and coordinates the data improvement actions and projects12.
The most important attribute of an information steward is to be closely aligned with the business function, because this can help to ensure that the data supports the business goals and objectives, that the data meets the business expectations and requirements, that the data is relevant and useful for the business decisions and actions, and that the data is aligned with the business processes and workflows12.
The information steward does not necessarily manage the systems that process the relevant data, as this may be done by other IT roles, such as data engineers, data analysts, or data administrators. The information steward does not need to have expertise in managing data quality systems, as this may be a technical skill that can be acquired or supported by other IT roles or tools. The information steward does not need to be part of the information architecture group, as this may be a separate function that focuses on designing and maintaining the data structures, models, and standards12. : Information Steward settings option descriptions - SAP Online Help. What is an Information Steward, and Why You Should Care?. 6 Key Responsibilities of the Invaluable Data Steward - Dun & Bradstreet.

Section: Volume A