ISACA CGEIT Exam Questions
Certified in the Governance of Enterprise IT (Page 15 )

Updated On: 24-Mar-2026

A business has outsourced IT operations to several third-party providers, but service level agreements (SLAs) are not clearly defined in all cases. Which of the following is the GREATEST risk to the business?

  1. Third parties could provide overlapping services.
  2. Quality of services is not enforceable.
  3. The scope of work is not clearly defined.
  4. Costs are not measurable.

Answer(s): B



A large enterprise has been experiencing high turnover of skilled IT personnel, resulting in a significant loss of knowledge within the IT department. Which of the following should be done FIRST to address this problem?

  1. Conduct a survey of current IT staff.
  2. Revise the IT resource management plan.
  3. Update human resources policies and practices.
  4. Develop an incentive scheme for IT employees.

Answer(s): A



A newly established IT steering committee is concerned whether or not a system is meeting availability objectives. Which of the following will provide the BEST information to make an assessment?

  1. Critical success factors
  2. Balanced scorecard
  3. Performance indicators
  4. Capability maturity levels

Answer(s): D



Following a major IT incident that resulted in a loss to the enterprise, a CIO is preparing for a meeting with the board of directors to discuss what may have failed internally. Which of the following should the CIO do FIRST to provide assurance to the board?

  1. Review the IT control environment.
  2. Ensure IT and enterprise risk management alignment.
  3. Review the incident response policy.
  4. Verify continuous monitoring is being performed.

Answer(s): B



A newly appointed CIO has issued a new IT strategic plan. Which of the following would be the MOST
effective way for the CIO to ensure the IT management team is held accountable for the delivery of the plan?

  1. Provide management training on IT strategic objectives.
  2. Revise the managers' performance goals to include key objectives.
  3. Enforce disciplinary action for managers if the plan is not delivered.
  4. Update the IT balanced scorecard with key objectives.

Answer(s): B



Viewing page 15 of 96
Viewing questions 71 - 75 out of 682 questions



Post your Comments and Discuss ISACA CGEIT exam dumps with other Community members:

CGEIT Exam Discussions & Posts

AI Tutor 👋 I’m here to help!