Question 111 · 363 in bank
An IT governance committee is defining a risk management policy for a portfolio of IT-enabled investments. Which of the following should be the PRIMARY consideration when developing the policy?
Show answer
Answer: A
Certified in the Governance of Enterprise IT363 questions across 37 pages are complete and free, with no account or card.
363 questions in this bank
Free access · progress saved on this device
An IT governance committee is defining a risk management policy for a portfolio of IT-enabled investments. Which of the following should be the PRIMARY consideration when developing the policy?
Answer: A
Which of the following is the PRIMARY purpose of an effective set of key risk indicators (KRIs)?
Answer: A
The primary purpose of an effective set of key risk indicators (KRIs) is to identify possible future adverse impacts on the enterprise. KRIs are used to monitor and measure the level of risk exposure and the likelihood of potential risks occurring. By regularly tracking and analyzing KRIs, organizations can proactively identify emerging risks, assess the effectiveness of their risk management strategies, and take appropriate actions to mitigate potential negative impacts. KRIs are an important tool for risk management and can help organizations make more informed decisions, improve performance, and protect their reputation and financial stability.
Source: Adapted from community discussion — Frank1480
A large bank has completed several acquisitions in the last few years that have resulted in redundant IT applications. To align with the strategic initiative of providing integrated services to customers, the IT steering committee has decided to share data and integrate applications. Which of the following would be MOST important to review in this situation?
Answer: C
To evaluate IT resource management, it is MOST important to define:
Answer: C
Defining the key goals for IT resource management is crucial as it sets the direction and purpose of resource allocation and utilization. These goals should align with the overall business objectives, ensuring that IT resources are allocated in a manner that supports the strategic priorities of the organization.
Source: Adapted from community discussion — Sathish5
Which of the following will BEST help to ensure that the governance of enterprise IT is consistently executed?
Answer: C
Merely having policies and procedures may not help. The on ground situation needs to be monitored through proper risk management processes.
Source: Adapted from community discussion — John_Connor
An enterprise is concerned that ongoing maintenance costs are not being considered when prioritizing IT-enabled business investments. Which of the following should be the enterprise's FIRST course of action?
Answer: A
The IT program manager does not see the value of conducting risk assessments for a new major IT project. The manager is reluctant to cooperate with internal auditors and the newly formed steering committee. Midway through the project, program requirements were changed because the CEO is a friend of a vendor and wants to implement this vendor's new technology. This decision will cause the current IT program budget to be insufficient and will be shown as overspending, After the requirement change request, the IT program manager should FIRST:
Answer: B
A business unit within an enterprise has directly contracted with a cloud service provider to process sensitive customer information. The CIO later identifies a serious risk of potential data compromise due to the vendor's insufficient segregation of environments and lack of strong access controls. The FIRST course of action should be to:
Answer: C
Discuss the risk with the vendor to determine mitigation actions: Engaging with the vendor to discuss the identified risks is crucial for understanding their perspective, obtaining information on existing controls, and collaborating on mitigation actions. This proactive communication allows for a more informed and collaborative approach to addressing the identified concerns.
Source: Adapted from community discussion — Sathish5
Which of the following would BEST align an enterprise's IT investments with its strategic objectives?
Answer: D
A contracted company employs key IT systems operational personnel to oversee technology used to manage a critical line of business. Management is concerned that a mass resignation by many disgruntled personnel may lead to a shutdown of these key systems. Which of the following should be the PRIMARY responsibility of IT governance to address this risk?
Answer: D
It should be C - Developing a resourcing strategy that quickly replaces staff is critical to ensure continuity of the critical line of business in case of a mass resignation. The IT governance should ensure that the contracted company has a sufficient pool of resources to replace staff and maintain the service levels. The IT governance should review the contract and service-level agreements with the contracted company to ensure that they have appropriate provisions for staff augmentation or replacement
Source: Adapted from community discussion — Frank1480
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CGEIT practice, question 111. 363 questions available.
Version 1.0.0. How we source questions