I85PREP
⌘ K
ICCP DGSP study materials
ICCP DGSP study resources

ICCP DGSP practice questions

One question at a time. Build your ICCP DGSP understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Data Governance & Stewardship

In a data governance operating model, what is the primary distinction between a data owner and a data steward?

  1. The owner is an external auditor, while the steward is a regulator.
  2. The owner is accountable for a data domain and its decisions, while the steward executes day-to-day quality and policy activities. Correct answer.
  3. The owner approves IT infrastructure budgets, while the steward manages database backups.
  4. The owner writes application code, while the steward performs software testing.

Explanation

Accountability and execution are deliberately separated in most governance models. The data owner holds decision rights and is answerable for the domain, while the steward carries out operational duties such as monitoring quality, resolving issues, and applying standards.

Question 2Data Governance & Stewardship

A governance council is establishing decision rights for a new customer data domain. Which artifact most directly records who may approve changes to that domain's definitions and access rules?

  1. A decision rights matrix Correct answer.
  2. A release calendar
  3. A network topology map
  4. A data model diagram

Explanation

A decision rights matrix, sometimes called a RACI or RAPID-style grid, explicitly maps governance activities to the roles that decide, consult, or are informed. It is the standard mechanism for making accountability for definitions and access approvals unambiguous.

Question 3Data Governance & Stewardship

Which statement best describes the purpose of a data governance charter?

  1. It lists every data element stored in production systems.
  2. It specifies the physical schema of the enterprise warehouse.
  3. It authorizes the governance program's scope, mandate, and reporting lines. Correct answer.
  4. It defines the service-level targets for application uptime.

Explanation

A charter is the founding document that legitimizes the governance program. It establishes scope, mandate, authority, membership, and escalation paths so that councils and stewards can act with recognized standing.

Question 4Data Governance & Stewardship

What is the core purpose of a data stewardship code of conduct?

  1. To replace the organization's privacy policy
  2. To set expected behaviors and ethical standards for stewards Correct answer.
  3. To document the technical architecture of the data platform
  4. To calculate the licensing cost of metadata tools

Explanation

A stewardship code of conduct translates governance values into expected behaviors, such as impartiality, confidentiality, and proper escalation. It guides how stewards exercise discretion rather than defining technical or financial details.

Question 5Data Governance & Stewardship

Which metric most directly indicates whether a data stewardship program is operating effectively?

  1. The number of servers provisioned for the warehouse
  2. The percentage of data issues resolved within agreed service targets Correct answer.
  3. The total volume of storage consumed by backups
  4. The count of dashboards published each quarter

Explanation

Effectiveness of stewardship is measured by how well issues are triaged and closed against agreed targets. Resolution timeliness reflects active ownership, whereas infrastructure and output counts do not demonstrate governance outcomes.

Question 6Data Governance & Stewardship

A data domain is defined in a governance program. What does the domain concept primarily establish?

  1. A physical partition scheme for database sharding
  2. A firewall zone for network segmentation
  3. A logical grouping of related data with a single accountable owner Correct answer.
  4. A licensing tier for analytics software

Explanation

Domains organize data by business subject area so that accountability can be assigned to one owner per grouping. This avoids diffuse responsibility and gives stewards a bounded scope for standards and quality work.

Question 7Data Governance & Stewardship

Which activity is the clearest example of a data steward's routine responsibility?

  1. Negotiating the enterprise software license renewal
  2. Reviewing and resolving data quality exceptions in an assigned domain Correct answer.
  3. Approving the annual IT capital plan
  4. Designing the corporate network failover strategy

Explanation

Stewards are the operational custodians who investigate and remediate quality exceptions within their assigned scope. Licensing, capital planning, and network resilience sit with procurement, finance, and infrastructure teams respectively.

Question 8Data Governance & Stewardship

What does a data governance maturity assessment typically evaluate?

  1. The clock speed of the primary database cluster
  2. The extent to which governance capabilities are defined, practiced, and measured Correct answer.
  3. The vendor selected for the reporting tool
  4. The number of rows in the customer table

Explanation

Maturity models rate capabilities along a progression from ad hoc to optimized, examining whether policies exist, are followed, and are measured. Technical specifications and vendor choices are inputs, not the object of the assessment.

Question 9Data Governance & Stewardship

An organization wants business glossary terms to be authoritative across systems. Which governance mechanism best ensures this?

  1. Allowing each application team to maintain its own private term list
  2. Restricting glossary access to the infrastructure team
  3. Assigning glossary term approval to designated stewards with a published review workflow Correct answer.
  4. Publishing terms only after the data warehouse is decommissioned

Explanation

Authoritative glossaries require a defined approval authority and a repeatable review workflow so terms are vetted once and reused consistently. Decentralized private lists recreate the inconsistency the glossary is meant to eliminate.

Question 10Data Governance & Stewardship

A steward discovers that two systems define 'active customer' differently, causing conflicting reports. What is the most appropriate first governance action?

  1. Ask the infrastructure team to add more storage
  2. Escalate the definition conflict to the domain owner for a binding decision Correct answer.
  3. Delete the report that shows the discrepancy
  4. Silently change one system's logic to match the other

Explanation

Definition conflicts are decision-rights matters that belong with the accountable domain owner, who can adjudicate and record the approved definition. Unilateral technical changes bypass governance and risk breaking downstream consumers.

Question 11Data Governance & Stewardship

Which approach best balances centralized governance with business-unit agility?

  1. A fully decentralized model with no shared standards
  2. An outsourced model where a vendor owns all data decisions
  3. A federated model where central policy is set and domains implement it Correct answer.
  4. A fully central model where every change requires council approval

Explanation

Federated governance sets enterprise-wide policy and standards centrally while delegating implementation and local decisions to domain teams. This preserves consistency without creating approval bottlenecks for every operational change.

Question 12Data Governance & Stewardship

A policy states that customer records must be classified before being shared externally. Which role is most accountable for confirming the classification is correct for a specific dataset?

  1. The procurement officer
  2. The data steward for the customer domain Correct answer.
  3. The help desk analyst
  4. The network administrator

Explanation

Classification accuracy requires subject-matter knowledge of the data, which sits with the domain steward. Network, service desk, and procurement roles lack the context to judge whether a customer dataset is properly classified.

Question 13Data Governance & Stewardship

Why should a governance program maintain an issue log with assigned owners and due dates?

  1. To satisfy the requirement that all logs be encrypted
  2. To provide traceability and drive accountability for resolving data problems Correct answer.
  3. To replace the need for a data quality tool
  4. To increase the storage footprint of the governance team

Explanation

An issue log creates an auditable record of problems, owners, and deadlines, which sustains momentum and enables reporting on resolution performance. It complements tooling rather than substituting for it.

Question 14Data Governance & Stewardship

A business unit wants to onboard a new dataset into the governed environment. Which sequence best reflects sound stewardship practice?

  1. Skip classification because the data is internal
  2. Load the data first, then assign an owner if problems arise
  3. Grant broad access immediately to accelerate analytics
  4. Register the dataset, assign ownership, classify it, then approve access Correct answer.

Explanation

Onboarding should establish identity, accountability, sensitivity, and access conditions before data is broadly used. Registering and classifying first prevents uncontrolled exposure and ensures someone is answerable for the asset.

Question 15Data Governance & Stewardship

Which control best supports the principle of least privilege within a data governance program?

  1. Granting all analysts administrator rights for convenience
  2. Sharing a single service account across teams
  3. Removing access reviews to reduce administrative effort
  4. Granting access based on documented role requirements and periodic recertification Correct answer.

Explanation

Least privilege is enforced by tying entitlements to documented role needs and revalidating them periodically. This limits accumulation of unnecessary rights and provides evidence that access remains justified.

Question 16Data Governance & Stewardship

A data owner delegates stewardship tasks but retains accountability. What does this imply for escalation?

  1. Unresolved issues must escalate to the owner for decision Correct answer.
  2. Stewards should resolve all issues without any reporting
  3. Escalation should go directly to external regulators
  4. Stewards may ignore issues because the owner is accountable

Explanation

Delegation transfers execution, not accountability, so issues that exceed a steward's authority must return to the owner. This keeps decision rights aligned with answerability and prevents unresolved problems from stalling.

Question 17Data Governance & Stewardship

Which practice most improves the reliability of a data governance scorecard?

  1. Changing metric definitions each quarter to reflect new priorities
  2. Reporting only metrics that always show improvement
  3. Defining each metric precisely with a documented calculation and data source Correct answer.
  4. Excluding business stakeholders from metric design

Explanation

Scorecards are only trustworthy when each metric has a stable, documented definition and traceable source. This allows trend comparison over time and prevents disputes about what a reported number actually represents.

Question 18Data Governance & Stewardship

A regulator requests evidence that data access decisions are consistently applied. Which artifact best demonstrates this?

  1. Audit trails of access approvals linked to policy rules Correct answer.
  2. The vendor contract for the database engine
  3. A screenshot of the data catalog homepage
  4. An oral assurance from the IT manager

Explanation

Consistent application of access decisions is evidenced by recorded approvals traceable to the governing policy. Audit trails show that each decision followed a rule, which is what assurance activities require.

Question 19Data Governance & Stewardship

Which factor most commonly undermines a newly launched stewardship program?

  1. Clear executive sponsorship and funded stewards
  2. A published glossary approval workflow
  3. Stewards appointed without time allocation or authority Correct answer.
  4. Regular issue review meetings

Explanation

Stewardship fails when named individuals lack dedicated capacity and decision authority, because duties cannot be performed alongside full workloads. Sponsorship, workflows, and reviews are supportive practices rather than failure causes.

Question 20Data Governance & Stewardship

An organization must reconcile conflicting retention requirements between a legal hold and a routine deletion schedule. What should governance dictate?

  1. Follow the routine schedule because it is automated
  2. Delete records immediately to reduce storage cost
  3. Suspend deletion for records under legal hold until released Correct answer.
  4. Let each system owner decide independently

Explanation

A legal hold overrides routine disposition because destroying held records can constitute spoliation. Governance must define a suspension mechanism that blocks automated deletion for affected records until counsel releases the hold.

Question 21Data Governance & Stewardship

A global firm applies one classification scheme across jurisdictions with differing privacy laws. Which design choice best preserves both consistency and local compliance?

  1. Abandon classification to avoid legal complexity
  2. Let each region invent unrelated classification labels
  3. Apply the weakest local rule everywhere to simplify operations
  4. Adopt the strictest applicable requirement as the enterprise baseline and document local overlays Correct answer.

Explanation

A strictest-common-denominator baseline gives a single consistent scheme while documented local overlays address jurisdiction-specific obligations. This avoids both fragmented labeling and the compliance risk of applying the weakest standard globally.

Question 22Data Governance & Stewardship

A steward proposes measuring governance success solely by the number of policies published. Why is this an inadequate indicator?

  1. Policy counts are impossible to collect accurately
  2. Policies should only be written by external auditors
  3. Publication counts measure output, not whether behavior or data quality changed Correct answer.
  4. Policies are never useful in governance programs

Explanation

Counting published policies captures activity rather than effect, and a program can produce many documents while practice remains unchanged. Effective measurement pairs output indicators with outcome evidence such as reduced issue recurrence or improved compliance rates.

Question 23Data Governance & Stewardship

Two domains both claim ownership of a shared 'product' identifier used across systems. What governance resolution is most defensible?

  1. Escalate permanently to the board without resolution
  2. Allow both domains to define it independently and reconcile in reports
  3. Assign a single authoritative owner for the identifier and require others to consume that definition Correct answer.
  4. Remove the identifier from all systems to eliminate conflict

Explanation

Shared reference data needs one authoritative owner to prevent divergent definitions from propagating. Other domains consume the approved definition, and cross-domain disputes are settled through the governance council's decision rights.

Question 24Data Governance & Stewardship

A governance council must prioritize remediation when resources are limited. Which criterion best aligns with governance principles?

  1. Remediate the dataset with the largest storage size first
  2. Address only issues raised by senior executives
  3. Rank by business criticality and regulatory exposure of the affected data Correct answer.
  4. Defer all remediation until the next fiscal year

Explanation

Prioritization should reflect the risk and value of the affected data, combining business criticality with regulatory exposure. Size, seniority of the requester, and calendar convenience are poor proxies for governance risk.

Question 25Data Governance & Stewardship

Why does a governance program require a defined dispute resolution path for data definitions?

  1. To guarantee that no definition is ever challenged
  2. To transfer all decisions to external counsel
  3. To eliminate the need for data owners
  4. To provide a timely, authoritative decision when domains disagree Correct answer.

Explanation

Disagreements over definitions are inevitable in federated organizations, and without a resolution path they stall or get settled informally. A defined path ensures disputes reach an authority empowered to decide and record the outcome.

Question 26Data Governance & Stewardship

Which statement best describes the primary purpose of a data governance operating model?

  1. It specifies the physical storage architecture used for enterprise data warehouses
  2. It lists the software licenses required to run analytics platforms
  3. It defines how decision rights, roles, and processes are organized to direct and control data Correct answer.
  4. It documents the network topology connecting data centers

Explanation

An operating model clarifies who decides, who is accountable, and through which forums and processes data decisions are made. It is organizational rather than technical, so storage, licensing, and network details fall outside its scope.

Question 27Data Governance & Stewardship

In a data governance framework, what distinguishes a data owner from a data custodian?

  1. The owner approves access and usage decisions, while the custodian implements technical controls Correct answer.
  2. The owner manages vendor contracts, while the custodian negotiates licensing
  3. The owner performs daily backups, while the custodian defines retention policy
  4. The owner writes ETL code, while the custodian approves the data model

Explanation

Accountability for decisions about a data asset rests with the owner, who authorizes access and usage. The custodian executes those decisions through technical safeguards such as access controls, backups, and storage management.

Question 28Data Governance & Stewardship

What is the main function of a data governance council or steering committee?

  1. Performing hands-on data cleansing for each business unit
  2. Resolving cross-domain policy conflicts and setting enterprise-wide priorities Correct answer.
  3. Writing the SQL transformations used in reporting pipelines
  4. Configuring database security groups on production servers

Explanation

A council is a decision-making body that arbitrates conflicts, approves policies, and prioritizes enterprise data initiatives. It operates at a strategic level rather than performing technical or operational tasks itself.

Question 29Data Governance & Stewardship

A data steward needs to document the meaning, allowed values, and approved source for a customer segment field. Which governance artifact is designed for this?

  1. A disaster recovery runbook
  2. A firewall rule set
  3. A capacity planning forecast
  4. A business glossary entry with associated metadata Correct answer.

Explanation

A business glossary captures approved definitions and can be extended with allowed values and authoritative source references. It is the standard vehicle for making field meaning explicit and consistent across systems.

Question 30Data Governance & Stewardship

Which item is a core component of a data classification policy?

  1. Defined sensitivity tiers with handling requirements for each tier Correct answer.
  2. A schedule of team-building events
  3. A catalog of office supply vendors
  4. A list of approved laptop models for analysts

Explanation

A classification policy establishes sensitivity levels, such as public, internal, confidential, and restricted, and states how each level must be handled. Handling requirements make classification actionable rather than merely descriptive.

Question 31Data Governance & Stewardship

What is the primary role of metadata management within a governance program?

  1. Making data assets discoverable and understandable through documented context Correct answer.
  2. Balancing query load across database replicas
  3. Encrypting data at rest in object storage
  4. Compressing datasets to reduce storage costs

Explanation

Metadata management captures technical, business, and operational context so that users can find and correctly interpret data. It supports governance by making lineage, definitions, and ownership visible.

Question 32Data Governance & Stewardship

Which statement best captures the purpose of a data governance policy?

  1. It replaces the need for any data stewardship roles
  2. It describes the company's marketing strategy for data products
  3. It provides optional suggestions that teams may adopt when convenient
  4. It states mandatory rules and expected behaviors for managing data Correct answer.

Explanation

A policy is a mandatory instrument that establishes rules and required behaviors, giving governance its authority. It is binding rather than advisory and depends on roles to enforce and interpret it.

Question 33Data Governance & Stewardship

Which metric most directly reflects the effectiveness of stewardship rather than its activity level?

  1. Total pages published in the governance wiki
  2. Count of glossary terms created in the past quarter
  3. Percentage of critical data elements meeting agreed quality thresholds Correct answer.
  4. Number of meetings held by the governance council

Explanation

Effectiveness is shown by whether data actually meets agreed quality standards for critical elements. Meeting counts, term counts, and page volume measure activity, which can rise without improving data.

Question 34Data Governance & Stewardship

A steward is asked to approve access to a restricted dataset for a new analyst. Which governance artifact should the steward consult first to determine the correct handling rules?

  1. The organization's travel expense policy
  2. The office floor plan showing desk assignments
  3. The classification policy and its handling requirements for the restricted tier Correct answer.
  4. The vendor contract for the analytics tool

Explanation

Handling requirements attached to the restricted classification tier define who may access the data and under what conditions. Consulting the classification policy first ensures the access decision follows approved rules.

Question 35Data Governance & Stewardship

A business unit proposes a new local definition for 'churn' that conflicts with the enterprise glossary. What should the steward do first?

  1. Ignore the proposal because local definitions are never permitted
  2. Raise the conflict through the defined glossary change process for review and resolution Correct answer.
  3. Delete the enterprise term to avoid confusion
  4. Immediately publish the local definition alongside the enterprise term

Explanation

Conflicting definitions should be routed through the established change and dispute process so that impacts are assessed and a decision is recorded. This preserves the glossary's authority while allowing legitimate local needs to be evaluated.

Question 36Data Governance & Stewardship

An organization wants to ensure that data quality rules are enforced at the point of entry rather than discovered in reports. Which governance approach best supports this?

  1. Reviewing data quality only during annual audits
  2. Removing validation to speed up data entry
  3. Relying on downstream analysts to correct errors manually
  4. Embedding quality controls into source systems with steward-approved validation rules Correct answer.

Explanation

Preventive controls at the source stop defects before they propagate, and steward approval keeps rules aligned with business definitions. Downstream correction and periodic audits are detective and reactive by comparison.

Question 37Data Governance & Stewardship

A data owner is going on extended leave. Which arrangement best preserves governance continuity?

  1. Transfer all decisions to the IT help desk temporarily
  2. Allow anyone on the team to approve access ad hoc
  3. Leave access decisions pending until the owner returns
  4. Formally delegate decision authority to a named alternate with documented scope Correct answer.

Explanation

Accountability must remain assigned, so a documented delegation to a named alternate preserves decision-making during absence. Undocumented or unassigned authority creates risk and audit gaps.

Question 38Data Governance & Stewardship

Why should a governance program define critical data elements (CDEs) rather than govern all data equally?

  1. It guarantees that all data quality issues will disappear
  2. It focuses limited stewardship effort on data that materially affects decisions and reporting Correct answer.
  3. It eliminates the need to classify the remaining data
  4. It removes the requirement for data owners

Explanation

CDEs identify the elements with the greatest business, regulatory, or reporting impact so resources are concentrated where they matter most. Non-critical data still requires baseline classification and ownership.

Question 39Data Governance & Stewardship

A regulator asks how the organization ensures that personal data is not retained beyond its approved period. Which governance mechanism most directly addresses this?

  1. A retention schedule enforced by automated deletion controls with exception handling Correct answer.
  2. A policy stating that retention is generally encouraged
  3. A quarterly newsletter reminding staff to delete old files
  4. An annual survey of employee storage habits

Explanation

Retention compliance requires defined periods plus enforcement, typically automated deletion with controlled exceptions such as legal holds. Awareness activities alone do not provide reliable evidence of enforcement.

Question 40Data Governance & Stewardship

What is the primary benefit of documenting data lineage within a governance program?

  1. It reduces the physical size of the dataset
  2. It replaces the need for access controls
  3. It enables impact analysis when a source or definition changes Correct answer.
  4. It automatically corrects inaccurate values

Explanation

Lineage traces how data moves from source through transformations to consumption, allowing teams to assess which reports are affected by a change. It does not alter data size, security, or values.

Question 41Data Governance & Stewardship

A governance team wants business units to adopt shared standards while retaining flexibility in implementation. Which mechanism best achieves this?

  1. Mandating outcomes and controls while allowing units to choose compliant implementation methods Correct answer.
  2. Deferring all standards until a full consensus is reached
  3. Prescribing a single tool for every unit with no exceptions
  4. Letting each unit define its own unrelated standards

Explanation

Outcome-based standards set non-negotiable controls while leaving implementation choices to units, balancing consistency and agility. Over-prescription and fragmentation both undermine the balance.

Question 42Data Governance & Stewardship

Which practice most strengthens the auditability of a data governance decision?

  1. Documenting decisions after the next annual review
  2. Recording the decision, rationale, approver, and date in a governance repository Correct answer.
  3. Relying on the approver's memory of the discussion
  4. Communicating decisions only through informal chat messages

Explanation

Auditability depends on contemporaneous records showing what was decided, why, by whom, and when. Informal or delayed documentation cannot reliably support audit or dispute resolution.

Question 43Data Governance & Stewardship

A steward notices that a downstream dashboard uses a deprecated field that was replaced last quarter. What is the most appropriate governance action?

  1. Log the issue, notify the dashboard owner, and track remediation to closure Correct answer.
  2. Take no action because the dashboard is outside the steward's domain
  3. Remove the deprecated field from the source system immediately
  4. Silently edit the dashboard without informing its owner

Explanation

Stewards coordinate remediation by logging the issue, informing the accountable party, and tracking it to closure. Unilateral technical changes or inaction create risk and erode trust in governance.

Question 44Data Governance & Stewardship

Which consideration should drive the assignment of a data domain to a particular business unit?

  1. Which unit is physically closest to the data center
  2. Which unit has the largest headcount
  3. Where accountability and expertise for the data's meaning and use primarily reside Correct answer.
  4. Which unit has the lowest operating budget

Explanation

Domain assignment follows accountability and subject-matter expertise, because the owning unit must define and defend the data's meaning. Headcount, budget, and location are not valid governance criteria.

Question 45Data Governance & Stewardship

An executive wants a single view of governance performance across domains. Which design choice best supports comparability?

  1. Allowing each domain to define its own metrics independently
  2. Changing metric definitions each quarter to reflect new priorities
  3. Reporting only the metrics that show favorable results
  4. Standardized metric definitions and calculation methods applied consistently across domains Correct answer.

Explanation

Comparable scorecards require common metric definitions and calculation methods so results can be aggregated and benchmarked. Independent or selectively reported metrics prevent meaningful comparison.

Question 46Data Governance & Stewardship

A global program must reconcile differing local legal requirements with a single enterprise data policy. Which approach is most defensible?

  1. Set an enterprise baseline and document approved local variances where law requires them Correct answer.
  2. Adopt whichever local rule is least restrictive for all locations
  3. Apply the strictest local law globally without any documented exceptions
  4. Let each country ignore the enterprise policy entirely

Explanation

A baseline plus documented, justified variances preserves enterprise consistency while respecting mandatory local law. Undocumented exceptions or blanket approaches create legal and governance risk.

Question 47Data Governance & Stewardship

Two systems produce different counts of active customers, and each system owner insists their definition is correct. Which governance action best resolves the conflict sustainably?

  1. Convene the accountable owners to agree a single authoritative definition and document it in the glossary Correct answer.
  2. Let the system with the most users set the definition
  3. Report both counts indefinitely without resolution
  4. Average the two counts to produce a compromise figure

Explanation

Sustainable resolution requires the accountable parties to agree on an authoritative definition and record it formally so systems align. Statistical compromise or unresolved dual reporting leaves the root cause in place.

Question 48Data Governance & Stewardship

A governance council has limited budget to remediate data quality defects. Which prioritization criterion best aligns with governance objectives?

  1. Defects ranked by regulatory exposure and business impact on critical data elements Correct answer.
  2. Defects selected by the order in which they were reported
  3. Defects chosen by the size of the affected database table
  4. Defects assigned to the team with the most available staff

Explanation

Prioritization should reflect risk and materiality, especially regulatory exposure and impact on critical data elements. First-in-line, table-size, or staffing-based criteria ignore governance value.

Question 49Data Governance & Stewardship

A steward wants to prove that a governance control is operating effectively, not merely designed. Which evidence is most persuasive?

  1. A slide deck presented at the program kickoff
  2. Sampled test results showing the control performed as intended over the review period Correct answer.
  3. A copy of the policy that describes the control
  4. A statement from the control owner that it works

Explanation

Operating effectiveness is demonstrated by testing evidence showing the control actually functioned during the period. Policy documents and assertions prove design or intent, not operation.

Question 50Data Governance & Stewardship

A newly hired steward inherits a domain with no documented data flows and frequent cross-team disputes. Which first step best establishes a governance baseline?

  1. Escalate every dispute to the executive committee without triage
  2. Inventory the domain's critical data elements, owners, and flows, then document known issues and decision paths Correct answer.
  3. Suspend all data sharing until documentation is complete
  4. Immediately rewrite all enterprise policies for the domain

Explanation

A baseline requires knowing what data exists, who is accountable, how it flows, and which issues and escalation paths apply. This enables targeted resolution instead of broad disruption.