ExamGecko
Search Search Login
Home Home / Isaca / CGEIT
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Results of an enterprise's customer survey indicate customers prefer using mobile applications. However, this same survey shows the enterprise's mobile applications are considered inferior compared to legacy browser-based applications. Which of the following should be the FIRST step in creating an effective long-term mobile application strategy?
Which of the following is the MOST important consideration when integrating a new vendor with an enterprise resource planning (ERP) system?
An enterprise is planning a transformation initiative by leveraging emerging technology that will have a significant impact on existing products and services Which of the following is the BEST way for IT to prepare for this change?
A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement was reached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following?
Which of the following BEST enables an enterprise to determine how business expectations should be addressed in a governance program?
Which of the following decisions would be made by the IT strategy committee?
An organization's board of directors has questioned the value provided by IT key performance indicators (KPIs). Which of the following is the BEST way to determine whether the KPIs adequately support organizational objectives?
Acceptance of an enterprise's newly implemented IT governance initiatives has been resisted by a functional group requesting more autonomy over technology choices. Which of the following is MOST important to accommodate this need for autonomy?
A CIO is concerned with the potential of vendor system failures that could cause a large amount of unintended system downtime. To determine how to prepare for this concern, what is MOST important for the CIO to review?
A CEO wants to establish a governance framework to facilitate the alignment of IT and business strategies. Which of the following should be a KEY requirement of this framework?

Question 524 - CGEIT discussion

Report
Export

Which of the following is MOST important for a CIO to ensure before signing a contract for a new cloud-based customer relationship management (CRM) system?

A.

The service provider has been audited for vulnerabilities and threats.

Answers
A.

The service provider has been audited for vulnerabilities and threats.

B.

Risk management responsibilities are agreed upon and accepted.

Answers
B.

Risk management responsibilities are agreed upon and accepted.

C.

The request for proposal (RFP) has been reviewed for completeness.

Answers
C.

The request for proposal (RFP) has been reviewed for completeness.

D.

A full system functionality check has been completed.

Answers
D.

A full system functionality check has been completed.

Suggested answer: B

Explanation:

Risk management is a crucial aspect of any cloud-based CRM system, as it involves identifying, assessing, and mitigating the potential risks that could affect the availability, performance, security, and compliance of the system. Before signing a contract for a new cloud-based CRM system, the CIO should ensure that the risk management responsibilities are clearly defined and allocated between the service provider and the customer, and that both parties accept and agree to them. This will help to avoid any confusion, conflict, or liability issues in case of any incidents or breaches that may occur in the future. Some of the risk management responsibilities that should be agreed upon and accepted are:

The scope and frequency of risk assessments and audits

The roles and responsibilities for risk monitoring and reporting

The escalation and resolution procedures for risk issues

The contingency and recovery plans for risk events

The security and privacy policies and standards for data protection

The service level agreements (SLAs) and key performance indicators (KPIs) for service quality and availability

Show Answer
asked 18/11/2024
Medard Vedasto
38 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms