CGEIT practice questions, page 2 of 19, with answer review and explanations.
Question 6
Which of the following should be the PRIMARY consideration when implementing IT governance in a small, newly established organization?
Approving enterprise architecture and standards
Defining IT project management methodology
Assigning a budget for IT governance applications
Assigning IT roles and responsibilities
Question 7
Which of the following is the BEST method to monitor IT governance effectiveness?
Service level management
Balanced scorecard
Risk control self-assessment
Strengths, weaknesses, opportunities, and threats (SWOT) analysis
Question 8
An internal auditor conducts an assessment of a two-year-old IT risk management program. Which of the following findings should be of MOST concern to the CIO?
Organizational responsibility for IT risk management is not clearly defined.
IT risk training records are not properly retained in accordance with established schedules.
None of the members of the IT risk management team have risk management-related certifications.
Only a few key risk indicators identified by the IT risk management team are being monitored and the rest will be on a phased schedule.
Question 9
An enterprise has discovered that there is significant duplication of IT investments. Which of the following would be MOST helpful in addressing this issue?
Establishing an IT steering committee
Delegating IT investment decisions to centralized IT
Maintaining an inventory of IT investments
Increasing the frequency of IT investment audits
Question 10
A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement was reached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following?