ISACA CGEIT Exam Questions
Certified in the Governance of Enterprise IT (Page 16 )

Updated On: 24-Mar-2026

Which of the following is the PRIMARY ongoing responsibility of the IT governance function related to risk?

  1. Responding to and controlling all IT risk events
  2. Verifying that all business units have staff skilled at assessing risk
  3. Communicating the enterprise risk management plan
  4. Ensuring IT risk management is aligned with business risk appetite

Answer(s): C



Which of the following is the BEST outcome measure to determine the effectiveness of IT risk management processes?

  1. Time lag between when IT risk is identified and the enterprise's response
  2. Percentage of business users satisfied with the quality of risk training
  3. Frequency of updates to the IT risk register
  4. Number of events impacting business processes due to delays in responding to risks

Answer(s): A



The BEST way for a CIO to monitor the alignment between the business and IT strategy is to regularly review:

  1. IT services supporting business processes.
  2. the balanced scorecard.
  3. key risk indicators (KRIs).
  4. the risk register.

Answer(s): A



Which of the following is PRIMARILY achieved through performance measurement?

  1. Process improvement
  2. Benefit realization
  3. Cost efficiency
  4. Transparency

Answer(s): A



While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's:

  1. maturity of IT processes.
  2. culture.
  3. enterprise architecture.
  4. level of outsourcing.

Answer(s): C



Viewing page 16 of 96
Viewing questions 76 - 80 out of 682 questions



Post your Comments and Discuss ISACA CGEIT exam dumps with other Community members:

CGEIT Exam Discussions & Posts

AI Tutor 👋 I’m here to help!