Data governance is best described as which of the following?

• A. The policy framework and processes for managing data quality, availability, security, and usage.
• B. A system for encrypting data.
• C. A method for authenticating users.
• D. A practice of monitoring phishing.

Answer: (A)

Data governance is the framework of policies, roles, and processes that define how data is managed across its lifecycle. It sets the standards for data quality, ensures data is available to the right people when needed, enforces security and privacy controls, and guides how data can be used and shared. This is why the description that fits best is the policy framework and processes for managing data quality, availability, security, and usage.

Security measures like encryption or user authentication address specific protections rather than the overall governance program, and phishing monitoring is about security awareness and threat detection. They’re important components, but they don’t capture the broad, ongoing oversight that governance provides.