Which of the following is the BEST method for making a strategic decision to invest in cloud services?

Prepare a request for information (RFI),

An organization's board of directors has questioned the value provided by IT key performance indicators (KPIs). Which of the following is the BEST way to determine whether the KPIs adequately support organizational objectives?

Review the KPIs with key business executives.

Define a strategy for IT measurement.

Define policies and procedures around current KPIs.

Review the KPIs with key business executives.

Work directly with the CEO to identify what measures should be used.

A large retail chain realizes that while there has not been any loss of data, IT security has not been a priority and should become a key goal for the enterprise. What should be the FIRST high-level initiative for a newly created IT strategy committee in order to support this business goal?

Identifying gaps in information asset protection

Defining data archiving and retrieval policies

Recruiting and training qualified IT security staff

Modernizing internal IT security practices

Risk management strategies are PRIMARILY adopted to:

achieve acceptable residual risk levels.

avoid risks for business and IT assets.

take necessary precautions for claims and losses.

achieve acceptable residual risk levels.

achieve compliance with legal requirements.

An enterprise made a significant change to its business operating model that resulted in a new strategic direction. Which of the following should be reviewed FIRST to ensure IT congruence with the new business strategy?

Enterprise project management framework

Information systems architecture

A chief technology officer (CTO) wants to ensure IT governance practices adequately address risk management specific to mobile applications. To create the appropriate risk policies for IT, it is MOST important for the CTO to:

understand the enterprise's risk tolerance.

map the business goals to IT risk processes.

identify the mobile technical requirements.

A large financial institution is considering outsourcing customer call center operations which will allow the chosen vendor to access systems from offshore locations. Which of the following represents the GREATEST risk?

Inconsistent customer service and reporting

Inadequate business continuity planning

An IT director is negotiating a contract with a vendor for application management services. There is concern by other departments that the outsourced services may not be delivered successfully. Which of the following is the BEST way for the IT director to address this concern?

Establish a policy on operational level agreements with vendors.

Implement a communication management plan.

Develop a comprehensive vendor management plan.

Review the IT service risk management plan.

Establish a policy on operational level agreements with vendors.

Which of the following is the BEST IT architecture concept to ensure consistency, interoperability, and agility for infrastructure capabilities?

Establishment of an IT steering committee

Standards-based reference architecture and design specifications

Establishment of standard vendor and technology designations

Design of policies and procedures

A company is considering selling products online, and the CIO has been asked to advise the board of directors of potential problems with this strategy. Which of the following is the ClO's BEST course of action?

Conduct a return on investment (ROI) analysis.

Review the enterprise architecture (EA).

In a large enterprise, which of The following is the MOST effective way to understand the business activities associated with the enterprise's information architecture?

Reviewing IT design with business process managers

Reviewing business strategy with senior management

Mapping business processes within a framework

Aligning business objectives to organizational strategy

A board of directors is concerned that a major IT implementation has the potential to significantly disrupt enterprise operations. Which of the following would be MOST helpful in identifying the extent of the potential impact of the disruption?

A risk assessment of the implementation

An analysis of the current enterprise risk appetite

An earned value analysis (EVA) of the implementation

A risk assessment of the implementation

A review of lessons learned from previous implementations

A CIO has been asked to modify an organization's IT performance measurement system to reflect recent changes in technology, including the movement of some data processing to a cloud solution. Which of the following is the PRIMARY consideration when designing such a measurement system?

Correctly understanding stakeholder needs for IT-related measurement

Ensuring that cost of measurement and reporting is minimized

Ensuring the measurement system maps to the enterprise architecture (EA)

Adequately defining the scope of services moved to the cloud

Correctly understanding stakeholder needs for IT-related measurement

Which of the following MOST effectively demonstrates operational readiness to address information security risk issues?

Procedures have been established for assessing and mitigating information security risks.

Executive management has announced an information security risk initiative.

IT management has communicated the need for information security risk management to the business.

A policy has been communicated stating enterprise commitment and readiness to address information security risk.

Procedures have been established for assessing and mitigating information security risks.

Best practice states that IT governance MUST:

be a component of enterprise governance.

enforce consistent policy across the enterprise.

be applied in the same manner throughout the enterprise.

apply consistent target levels of maturity to processes.

be a component of enterprise governance.

A new CIO has been charged with updating the IT governance structure. Which of the following is the MOST important consideration to effectively influence organizational and process change?

Ensuring the commitment of stakeholders

Obtaining guidance from consultants

Aligning IT services to business processes

Redefining the IT risk appetite

Ensuring the commitment of stakeholders

The PRIMARY benefit of integrating IT resource planning into enterprise strategic planning is that it enables the enterprise to:

allocate resources efficiently to achieve desired goals.

adjust business goals depending upon resource availability.

prioritize resource allocation based on sourcing strategy.

develop tactical plans to achieve resource optimization.

An enterprise is implementing a new IT governance program. Which of the following is the BEST way to increase the likelihood of its success?

The IT steering committee approves the implementation efforts.

The CIO communicates why IT governance is important to the enterprise.

Implementation follows an IT audit recommendation.

The CIO issues a mandate for adherence to the program.

Which of the following is the PRIMARY element in sustaining an effective governance framework?

Establishment of a performance metric system

Identification of optimal business resources

Establishment of a performance metric system

Ranking of critical business risks

Assurance of the execution of business controls

A global financial enterprise has been experiencing a substantial number of information security incidents that have directly affected its business reputation. Which of the following should be the IT governance board's FIRST course of action?

Request an IT security assessment to identify the main security gaps.

Require revisions to how security incidents are managed by the IT department.

Request an IT security assessment to identify the main security gaps.

Execute an IT maturity assessment of the security process.

Mandate an update to the enterprise's IT security policy.

An enterprise has had the same IT governance framework in place for several years. Currently, large and small capital projects go through the same architectural governance reviews. Despite repeated requests to streamline the review process for small capital projects, business units have received no response from IT. The business units have recently escalated this issue to the newly appointed GO. Which of the following should be done FIRST to begin addressing business needs?

Assess the impact of the proposed change.

Create a central repository for the business to submit requests.

Explain the importance of the IT governance framework.

Assess the impact of the proposed change.

Assign a project team to implement necessary changes.

The board of directors has mandated the use of geolocation software to track mobile assets assigned to employees who travel outside of their home country. To comply with this mandate, the IT steering committee should FIRST request

an assessment to determine if data privacy protection is addressed.

the inclusion of mandatory training for remote device users.

an architectural review to determine appropriate solution design.

an assessment to determine if data privacy protection is addressed.

an update to the acceptable use policy.

An analysis of an organization s security breach is complete. The results indicate that the quality of the code used for updates to its primary customer-facing software has been declining and security flaws were introduced. The FIRST IT governance action to correct this problem should be to review:

the change management control framework.

compliance with the user testing process.

the change management control framework.

the qualifications of developers to write secure code.

Which of the following is the MOST effective way of assessing enterprise risk?

Business vulnerability assessment

When evaluating benefits realization of IT process performance, the analysis MUST be based on;

industry standard key performance indicators (KPIs).

portfolio prioritization criteria.

Which of the following is the PRIMARY ongoing responsibility of the IT governance function related to risk?

Ensuring IT risk management is aligned with business risk appetite

Responding to and controlling all IT risk events

Communicating the enterprise risk management plan

Ensuring IT risk management is aligned with business risk appetite

Verifying that all business units have staff skilled at assessing risk

An enterprise considering implementing IT governance should FIRST develop the scope of the IT governance program and:

communicate the program to stakeholders to gain consensus.

initiate the program using an implementation roadmap.

establish initiatives for business and managers.

acquire the resources that will be required.

communicate the program to stakeholders to gain consensus.

Which of the following should be the MAIN reason for an enterprise to implement an IT risk management framework?

The need to enable IT risk-aware decisions by executives

The results of an external audit report concerning IT risk management processes.

The need to address market regulations and internal compliance in IT risk

The ability to benchmark IT risk policies against major competitors

An enterprise's information security function is making changes to its data retention and backup policies. Which of the following presents the GREATEST risk?

Business data owners were not consulted.

The new policies Increase the cost of data backups.

Data backups will be hosted at third-party locations.

The retention period for data backups is Increased.

Which of the following would be MOST important to update if a decision is made to ban end user-owned devices in the workplace?

Enterprise acceptable use policy

Employee nondisclosure agreement

Enterprise risk appetite statement

Enterprise acceptable use policy

Which of the following is the MOST effective way to manage risks within the enterprise?

Assign individuals responsibilities and accountabilities for management of risks.

Make staff aware of the risks in their area and risk management techniques.

Provide financial resources for risk management systems.

Document procedures and reporting processes.

Which of the following is an ADVANTAGE of using strategy mapping?

It depicts the cause-and-effect linked relationships between strategic objectives.

It provides effective indicators of productivity and growth.

It depicts the maturity levels of processes that support organizational strategy.

It identifies barriers to strategic alignment and links them to specific outcomes.

It depicts the cause-and-effect linked relationships between strategic objectives.

Isaca CGEIT Practice Test 2 - Free Online Exam Questions 41-80

Which of the following represents the GREATEST challenge to implementing IT governance?

Isaca CGEIT Practice Test 2

Question

Isaca CGEIT Practice Tests

Practice Tests