Which of the following is an example of an IT governance control?

An example of an IT governance control could be the implementation of a security policy that outlines how data should be encrypted and protected. This policy would dictate who has access to certain information, how that access is granted, and how breaches are handled.

Here are the steps to explain this:

1. Identify the need for control: In this case, the need is to protect sensitive data and prevent unauthorized access.

2. Develop a policy: The IT department, often in collaboration with other departments, would develop a security policy. This policy would outline the rules for data encryption, access, and breach handling.

3. Implement the policy: Once the policy is developed, it needs to be implemented. This could involve installing new software, training staff, or changing procedures.

4. Monitor and adjust: After the policy is implemented, it needs to be monitored to ensure it's working as intended. If any issues are identified, the policy should be adjusted as necessary.

5. Review: The policy should be reviewed regularly to ensure it's still relevant and effective. This could involve checking if the policy complies with new regulations, or if it needs to be updated due to changes in the company or technology.

So, the security policy is an example of an IT governance control because it's a way for the organization to control how its IT resources are used and protected.