ISACA CGEIT Exam Questions
Certified in the Governance of Enterprise IT (Page 11 )

Updated On: 17-Feb-2026

An enterprise has decided to implement an enterprise resource planning (ERP) system to achieve operating and cost efficiencies through global IT standardization. The business units are resistant because they are used to operating autonomously. The CEO has instructed the CIO to move quickly with the implementation to force acceptance with business unit leaders. Which of the following should be the CIO's FIRST step?

  1. Request funding from the CEO to hire ERP consultants.
  2. Ask the CEO to be the sponsor of the program.
  3. Engage a reluctant business unit to conduct a proof-of-concept pilot.
  4. Build a governance framework for identifying non-standard processes.

Answer(s): D



Which of the following is MOST critical to have in place before management can establish an IT risk assessment and response approach?

  1. A portfolio of IT investments
  2. Defined roles and responsibilities
  3. Historic data on risk events
  4. A balanced scorecard

Answer(s): B



An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues in application design and configuration. Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior?

  1. Results of application security testing
  2. Results of application security awareness training quizzes
  3. Number of reported security incidents
  4. Number of IT employees attending security training sessions

Answer(s): C



An enterprise can BEST assess the benefits of a new IT project through its life cycle by:

  1. calculation of the total cost of ownership.
  2. calculation of the net present value.
  3. periodic review of the business case.
  4. periodic measurement of the project slip rate.

Answer(s): C



Which of the following is the MOST important objective of IT program portfolio management?

  1. Reduced technology costs
  2. Reduced project management costs
  3. Improved IT service delivery
  4. Appropriate investment mix

Answer(s): D


Reference:

https://www.northeastern.edu/graduate/blog/project-management-vs-portfolio-management-vs-program-management/






Post your Comments and Discuss ISACA CGEIT exam dumps with other Community members:

Join the CGEIT Discussion