ISACA CGEIT Exam Questions
Certified in the Governance of Enterprise IT (Page 3 )

Updated On: 16-Feb-2026

Which of the following should be the PRIMARY consideration when implementing IT governance in a small, newly established organization?

  1. Approving enterprise architecture and standards
  2. Defining IT project management methodology
  3. Assigning a budget for IT governance applications
  4. Assigning IT roles and responsibilities

Answer(s): D


Reference:

https://www.isaca.org/resources/news-and-trends/newsletters/cobit-focus/2017/using-cobit-in-government-departments



Which of the following is the BEST method to monitor IT governance effectiveness?

  1. Service level management
  2. Balanced scorecard
  3. Risk control self-assessment
  4. Strengths, weaknesses, opportunities, and threats (SWOT) analysis

Answer(s): B


Reference:

https://www.isaca.org/resources/isaca-journal/issues/2016/volume-6/performance-measurement-metrics-for-it-governance



An internal auditor conducts an assessment of a two-year-old IT risk management program. Which of the following findings should be of MOST concern to the CIO?

  1. Organizational responsibility for IT risk management is not clearly defined.
  2. IT risk training records are not properly retained in accordance with established schedules.
  3. None of the members of the IT risk management team have risk management-related certifications.
  4. Only a few key risk indicators identified by the IT risk management team are being monitored and the rest will be on a phased schedule.

Answer(s): D



An enterprise has discovered that there is significant duplication of IT investments. Which of the following would be MOST helpful in addressing this issue?

  1. Establishing an IT steering committee
  2. Delegating IT investment decisions to centralized IT
  3. Maintaining an inventory of IT investments
  4. Increasing the frequency of IT investment audits

Answer(s): A



A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement was reached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following?

  1. Internal audit director
  2. CIO
  3. The board of directors
  4. Application users

Answer(s): A






Post your Comments and Discuss ISACA CGEIT exam dumps with other Community members:

Join the CGEIT Discussion