QUESTION: 189

Which of the following MOST effectively demonstrates operational readiness to address information security risk issues?

Executive management has announced an information security risk initiative.
Procedures have been established for assessing and mitigating information security risks.
IT management has communicated the need for information security risk management to the business.
A policy has been communicated stating enterprise commitment and readiness to address information security risk.

Answer(s): B

Reveal Solution Next Question

QUESTION: 190

Which of the following should be the CIO’s GREATEST consideration when making changes to the IT strategy?

Have key stakeholders been consulted?
Have IT risk metrics been adjusted?
Has the investment portfolio been revised?
Has the impact to the enterprise architecture been assessed?

Answer(s): C

Reveal Solution Next Question

QUESTION: 191

Senior management wants to promote investment in IT, but is uncertain that associated risks are being properly identified. The BEST way to address this concern is to:

ensure business cases are developed by IT.
engage an external consultant to develop risk scenarios.
assign an IT cost controller to the finance department.
appoint an IT representative to the business risk committee.

Answer(s): D

Reveal Solution Next Question

QUESTION: 192

An enterprise is contracting with an outsourcing partner for a long-term engagement. The BEST time for the enterprise to plan for the event of contract termination:

developing the initial contract.
either party decides to terminate the contract.
issues surface in the contractual relationship.
planning for the contract as part of business continuity.

Answer(s): C

Reveal Solution Next Question

Free CGEIT Exam Braindumps (page: 48)

QUESTION: 189

QUESTION: 190

QUESTION: 191

QUESTION: 192