CGEIT practice questions, page 8 of 19, with answer review and explanations.
Question 36
An enterprise's IT department has been operating independently without regard to business concerns, leading to misalignment between business and IT. The BEST way to establish alignment would be to require:
business to help define IT goals.
IT to define business objectives.
business to fund IT services.
IT and business to define risks.
Question 37
Which of the following are the MOST critical enablers for implementing IT governance in an enterprise?
Involvement of IT strategy and steering committees
Assigning roles and responsibilities for IT governance
Commitment and promotion by senior management
Prioritizing IT projects and funding for IT governance
Question 38
A business unit is planning to replace an existing IT legacy solution with a hosted Software as a Service (SaaS) solution. However, business management is concerned that stored data will be at risk. Which of the following would be the MOST effective way to reduce the risk associated with the SaaS solution?
Include risk-related requirements in the SaaS contract.
Create key risk indicators for the SaaS solution.
Redefine the risk appetite and risk tolerance.
Research the technology and identify potential security threats.
Question 39
Which of the following would be MOST helpful in gaining executive support for an IT-enabled business initiative?
Framing the discussion in terms of impact to business value
Presenting a comprehensive risk management plan
Providing examples of risks realized by competitors for similar initiatives
Presenting key findings of a business impact analysis conducted by IT managers
Question 40
An enterprise is planning to implement several strategic initiatives that will require the acquisition of new IT systems. Which of the following would BEST enable the IT steering committee to prioritize proposed initiatives based on business objectives?