CGEIT practice questions, page 10 of 19, with answer review and explanations.
Question 46
An enterprise has decided to implement an enterprise resource planning (ERP) system to achieve operating and cost efficiencies through global IT standardization. The business units are resistant because they are used to operating autonomously. The CEO has instructed the CIO to move quickly with the implementation to force acceptance with business unit leaders. Which of the following should be the CIO's FIRST step?
Request funding from the CEO to hire ERP consultants.
Ask the CEO to be the sponsor of the program.
Engage a reluctant business unit to conduct a proof-of-concept pilot.
Build a governance framework for identifying non-standard processes.
Question 47
Which of the following is MOST critical to have in place before management can establish an IT risk assessment and response approach?
A portfolio of IT investments
Defined roles and responsibilities
Historic data on risk events
A balanced scorecard
Question 48
An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues in application design and configuration. Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior?
Results of application security testing
Results of application security awareness training quizzes
Number of reported security incidents
Number of IT employees attending security training sessions
Question 49
An enterprise can BEST assess the benefits of a new IT project through its life cycle by:
calculation of the total cost of ownership.
calculation of the net present value.
periodic review of the business case.
periodic measurement of the project slip rate.
Question 50
Which of the following is the MOST important objective of IT program portfolio management?