CGEIT

CGEIT practice questions, page 15 of 19, with answer review and explanations.

Question 71

Which of the following is the PRIMARY ongoing responsibility of the IT governance function related to risk?

  1. Responding to and controlling all IT risk events
  2. Verifying that all business units have staff skilled at assessing risk
  3. Communicating the enterprise risk management plan
  4. Ensuring IT risk management is aligned with business risk appetite

Question 72

Which of the following is the BEST outcome measure to determine the effectiveness of IT risk management processes?

  1. Time lag between when IT risk is identified and the enterprise's response
  2. Percentage of business users satisfied with the quality of risk training
  3. Frequency of updates to the IT risk register
  4. Number of events impacting business processes due to delays in responding to risks

Question 73

The BEST way for a CIO to monitor the alignment between the business and IT strategy is to regularly review:

  1. IT services supporting business processes.
  2. the balanced scorecard.
  3. key risk indicators (KRIs).
  4. the risk register.

Question 74

Which of the following is PRIMARILY achieved through performance measurement?

  1. Process improvement
  2. Benefit realization
  3. Cost efficiency
  4. Transparency

Question 75

While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's:

  1. maturity of IT processes.
  2. culture.
  3. enterprise architecture.
  4. level of outsourcing.