QUESTION: 77

The MOST beneficial aspect of utilizing an IT risk management framework is that it:

addresses a lack of data in risk reporting.
facilitates the identification of technologies posing the greatest risk to IT.
enables a consistent approach to risk management.
drives inclusion of the technology function in enterprise risk management.

Answer(s): B

QUESTION: 78

When defining an enterprise governance framework, the PRIMARY determination of the degree to which the framework is principle-based or policy-based is:

enterprise architecture framework.
organizational decision-making style.
IT process maturity.
organizational structure.

Answer(s): D

Reference:

https://www.isaca.org/resources/isaca-journal/past-issues/2013/it-policy-framework-based-on-cobit-5

Reveal Solution Next Question

A company is considering selling products online, and the CIO has been asked to advise the board of directors of potential problems with this strategy. Which of the following would be the CIO's BEST course of action?

Perform a risk assessment.
Review the security framework.
Conduct a return on investment analysis.
Review the enterprise architecture.

Answer(s): B

Reveal Solution Next Question

QUESTION: 80

After shifting from lease to purchase of IT infrastructure and software licenses, an enterprise has to pay for unexpected lease extensions causing significant cost overruns. The BEST direction for the IT steering committee would be to establish:

a program to annually review financial policy on overruns.
an end-of-life program to remove aging infrastructure from the environment.
budget cuts to compensate for the cost overruns.
a policy to consider total cost of ownership in investment decisions.

Answer(s): D

Reveal Solution Next Question

Free CGEIT Exam Braindumps (page: 21)

QUESTION: 77

QUESTION: 78

Reference:

QUESTION: 79

QUESTION: 80

CGEIT Discussions & Posts