Question 221 · 363 in bank
In which of the following situations is it MOST appropriate to use a quantitative risk assessment?
Show answer
Answer: A
Certified in the Governance of Enterprise IT363 questions across 37 pages are complete and free, with no account or card.
363 questions in this bank
Free access · progress saved on this device
In which of the following situations is it MOST appropriate to use a quantitative risk assessment?
Answer: A
An enterprise's IT department has been operating independently without regard to business concerns, leading to misalignment between business and IT. The BEST way to establish alignment would be to require:
Answer: A
This is D. The best way to align IT with business is for both to come together to determine the risk that can impact the organization.
Source: Adapted from community discussion — GRamos
Which of the following represents the GREATEST challenge to implementing IT governance?
Answer: C
A CIO of an enterprise is concerned that IT and the business have different priorities. Which of the following would BEST demonstrate the current state of strategic alignment?
Answer: B
The answer is B. Balanced scorecard. A balanced scorecard is a framework that helps organizations to align their IT investments with their business objectives. It does this by tracking performance across four dimensions: financial, customer, internal business processes, and learning and growth. By tracking performance across these four dimensions, the balanced scorecard can help to identify any gaps between IT and the business. This can help the CIO to understand where IT is not aligned with the business, and to take steps to improve alignment.
Source: Adapted from community discussion — yihwen
From an IT governance perspective, establishing performance measurements is PRIMARILY the responsibility of:
Answer: C
The answer is C. senior management. IT governance is the set of processes and structures that ensure that an organization's IT assets are aligned with its business objectives. Senior management is responsible for establishing the overall IT governance framework, and this includes establishing performance measurements. The board of directors is responsible for oversight of IT governance, but they typically delegate the responsibility for establishing performance measurements to senior management. The IT architecture review board and enterprise risk management (ERM) are also involved in IT governance, but they do not have the primary responsibility for establishing performance measurements.
Source: Adapted from community discussion — yihwen
Which of the following is the PRIMARY element in sustaining an effective governance framework?
Answer: B
The answer is B. Assurance of the execution of business controls. A governance framework is a set of policies, processes, and structures that ensure that an organization is managed in a way that is aligned with its objectives and that its risks are effectively managed. The primary element in sustaining an effective governance framework is the assurance of the execution of business controls. Business controls are the policies, procedures, and activities that are designed to mitigate risk and ensure that the organization is meeting its objectives. Assurance of the execution of business controls means that there is a process in place to regularly review and test the effectiveness of these controls. This ensures that the controls are actually working as intended and that they are still relevant to the organization's current risks.
Source: Adapted from community discussion — yihwen
During an IT strategy review, a new CIO determined that numerous important internal processes have not been updated for several years and should be reexamined. Which of the following would be the BEST approach to address this concern?
Answer: C
The best approach to address this concern is C. Map the processes to a capability maturity model. A capability maturity model (CMM) is a framework for assessing the maturity of an organization's processes. It provides a way to measure how well the organization's processes are defined, managed, and controlled. By mapping the processes to a CMM, the CIO can identify the processes that are most in need of improvement.
Source: Adapted from community discussion — yihwen
Which of the following would BEST support an enterprise's initiative to incorporate desired organizational behaviors into the IT governance framework?
Answer: C
An IT risk committee is trying to mitigate the risk associated with a newly implemented bring your own device (BYOD) policy and supporting mobile device management (MDM) tools. Which of the following would be the BEST way to ensure employees understand how to protect sensitive corporate data on their mobile device?
Answer: B
The use of an IT balanced scorecard enables the realization of business value of IT through:
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CGEIT practice, question 221. 363 questions available.
Version 1.0.0. How we source questions