CGEIT

CGEIT practice questions, page 19 of 19, with answer review and explanations.

Question 91

A recent benchmarking analysis has indicated an IT organization is retaining more data and spending significantly more on data retention than its competitors. Which of the following would BEST ensure the optimization of retention costs?

  1. Requiring that all business cases contain data deletion and retention plans
  2. Revalidating the organization's risk tolerance and re-aligning the retention policy
  3. Redefining the retention policy to align with industry best practices
  4. Moving all high-risk and medium-risk data backups to cloud storage

Question 92

An enterprise is undertaking a multi-year portfolio of IT initiatives to replace core accounting systems. The program management team has developed a business case and is defining a roadmap for the initiatives. Of the following, who should be responsible for defining the optimization criteria for the portfolio?

  1. Project management office
  2. Board of directors
  3. Program management team
  4. IT steering committee

Question 93

An enterprise has entered into a new market which brings additional regulatory compliance requirements. To address these new requirements, the enterprise should FIRST:

  1. update the organization's risk profile.
  2. have executive management monitor compliance.
  3. outsource the compliance process.
  4. appoint a compliance officer.

Question 94

An IT steering committee is preparing to review proposals for projects that implement emerging technologies. In anticipation of the review, the committee should FIRST:

  1. require a review of the enterprise risk management framework.
  2. understand how the emerging technologies will influence risk across the enterprise.
  3. determine if the IT staff can support the emerging technologies.
  4. require a capacity plan and framework review for the emerging technologies.