QUESTION: 225

The BEST time to identify metrics to measure the performance of an IT-enabled investment is during:

investment feasibility analysis.
system implementation.
project initiation.
business case development.

Answer(s): D

An enterprise is concerned that ongoing maintenance costs are not being considered when prioritizing IT- enabled business investments. Which of the following should be the enterprise’s FIRST course of action?

Require business cases to have product life cycle information.
Establish a portfolio manager role to monitor and control the IT projects.
Mandate an enterprise architecture review with business stakeholders.
Implement a balanced scorecard for the IT project portfolio.

Answer(s): C

Reveal Solution Next Question

QUESTION: 227

The IT program manager does not see the value of conducting risk assessments for a new major IT project. The manager is reluctant to cooperate with internal auditors and the newly formed steering committee. Midway through the project, program requirements were changed because the CEO is a friend of a vendor and wants to implement this vendor’s new technology. This decision will cause the current IT program budget to be insufficient and will be shown as overspending, After the requirement change request, the IT program manager should FIRST:

report the matter to internal audit as a program deviation to be reviewed.
obtain confirmation from the business and a decision by the steering committee.
align IT with the business and agree to the business request.
request additional funding from the business owner to cover the additional scope.

Answer(s): B

Reveal Solution Next Question

QUESTION: 228

A business unit within an enterprise has directly contracted with a cloud service provider to process sensitive customer information. The CIO later identifies a serious risk of potential data compromise due to the vendor’s insufficient segregation of environments and lack of strong access controls. The FIRST course of action should be to:

immediately suspend sending of data to the cloud service provider.
notify internal audit of the risk.
discuss the risk with the vendor to determine mitigation actions.
inform the business process owner of the risk.

Answer(s): B

Reveal Solution Next Question

Free CGEIT Exam Braindumps (page: 57)

QUESTION: 225

QUESTION: 226

QUESTION: 227

QUESTION: 228