Free CGEIT Exam Braindumps (page: 16)

Page 15 of 119

What information is MOST important to include when reporting key risk indicators to the board of directors?

  1. The effect of emerging risk trends on current risk exposure
  2. Risk appetite, risk threshold and risk tolerance
  3. Classification of current business risk
  4. Costs and resource needs related to risk mitigation measures

Answer(s): A



The board of directors of a major retail chain wants to know what capabilities are in place to prevent customer credit card data from being hacked. Which of the following should be established to provide useful information about a potential future event?

  1. Risk tolerance
  2. Lead indicators
  3. Lag indicators
  4. Performance indicators

Answer(s): B



Several experienced IT resources have been hired away by a competitor. These individuals created and managed a business critical system that gave the enterprise a market advantage. Which of the following should be the PRIMARY concern of the system's business owner?

  1. The impact on morale of the remaining IT employees
  2. The competitor hiring additional IT employees from the enterprise
  3. Whether access to the system and data has been adequately revoked
  4. Whether remaining staff are able to maintain the quality of the system

Answer(s): D



An enterprise has a large backlog of IT projects. The current strategy is to execute projects as they are submitted, but executive management does not believe this method is optimal. Which of the following is the MOST important action to address this concern?

  1. Establish a performance dashboard that determines business value.
  2. Create a combined business/IT committee to determine project prioritization.
  3. Implement a methodology to prioritize projects based on resource availability.
  4. Implement stage-gating to determine the value of each project.

Answer(s): D






Post your Comments and Discuss ISACA CGEIT exam with other Community members:

CGEIT Discussions & Posts