In information governance, which component focuses on who can access data and when?

• A. Metadata management
• B. Access governance
• C. Data quality metrics
• D. Data lifecycle policies

Answer: (B)

Access governance focuses on who can access data and when. It involves setting up and enforcing access policies, provisioning and de-provisioning user permissions, and managing roles and entitlements. It also covers time-bound access, approval workflows, and ongoing auditing to ensure that individuals have the appropriate level of access only for the required period. This makes it the component that most directly addresses identities, roles, and the timing of access.

Metadata management deals with information about the data itself—such as data dictionaries, lineage, and tags. Data quality metrics assess how accurate, complete, and reliable the data are. Data lifecycle policies govern how data is created, stored, archived, and disposed of.