Isaca CGEIT Practice Test - Questions Answers, Page 12

A large enterprise that is diversifying its business will be transitioning to a new software platform, which is expected to cause data changes. Which of the following should be done FIRST when developing the related metadata management process?

An IT director has become aware that a certain subset of data collected lawfully can be used to generate additional revenue. However, this particular use of the data is outside the original intention. What is the PRIMARY reason this situation should be escalated to the IT steering committee?

Of the following, who should approve the criteria for information quality within an enterprise?

From a governance perspective, the PRIMARY goal of an IT risk optimization process should be to ensure:

Which of the following is the BEST way to ensure new systems can be adequately supported once in production?

To benefit from economies of scale, a CIO is deciding whether to outsource some IT services. Which of the following would be the MOST important consideration during the decision-making process?

The board and senior management of a new enterprise recently met to formalize an IT governance framework. The board of directors' FIRST step in implementing IT governance is to ensure that:

An IT risk assessment for a large healthcare group revealed an increased risk of unauthorized disclosure of information. Which of the following should be established FIRST to address the risk?

Which of the following should be the MAIN governance focus when implementing a newly approved bring your own device (BYOD) policy?