ISACA CGEIT Exam Prep
Certified in the Governance of Enterprise IT (Page 41 )

Updated On: 24-Aug-2026

While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's:

  1. culture.
  2. level of outsourcing.
  3. enterprise architecture (EA).
  4. maturity of IT processes.

Answer(s): A

Explanation:

 Culture is the most critical factor to understand while assessing the feasibility of introducing new IT practices and standards into the IT governance framework, because it influences the behavior, values, and beliefs of the organization and its stakeholders. Culture affects how IT governance is perceived, implemented, and evaluated in the organization. A mismatch between the organizational culture and the IT governance framework can lead to resistance, conflict, and poor performance.
Therefore, it is essential to assess the current culture of the organization and its readiness for change before introducing new IT practices and standards. Reference := The Influence of Organizational Culture in Application of Information Technology Governance, The Value of IT Governance, Organisational Governance Explained: The Keys to Success



When determining the optimal IT service levels to support business, which of the following is MOST important?

  1. IT capacity utilization and availability.
  2. Cost/benefit to the business.
  3. Available IT budget.
  4. Business user requests

Answer(s): B

Explanation:

When determining the optimal IT service levels to support business, the most important factor is the cost/benefit to the business. This means that the IT service levels should be aligned with the business objectives, needs, and expectations, and that the benefits of providing a certain level of IT service should outweigh the costs of delivering it. The cost/benefit analysis should consider both the direct and indirect costs and benefits of IT service levels, such as the impact on customer satisfaction, revenue, productivity, quality, risk, compliance, innovation, and competitive advantage. A cost/benefit analysis can help IT managers justify their IT service level decisions and communicate them effectively to the business stakeholders. Reference := IT cost/benefit analysis: Why it matters and how to do it right, IT Support Levels Clearly Explained: L1, L2, L3 & More, IT support levels: definition, tiers and advantages, The Importance of Adopting Formal IT Service Management



Which of the following is MOST important when an IT-enabled business initiative involves multiple business functions?

  1. Defining cross-departmental budget allocation
  2. Conducting a systemic risk assessment
  3. Developing independent business cases
  4. Establishing a steering committee with business representation

Answer(s): D

Explanation:

Establishing a steering committee with business representation is the most important factor when an IT-enabled business initiative involves multiple business functions, because it ensures that the initiative is aligned with the strategic goals and needs of the organization, and that the different business functions have a voice and a stake in the decision-making process. A steering committee can also provide guidance, support, and oversight to the IT team and help resolve any conflicts or issues that may arise among the business functions. A steering committee can also monitor the progress and performance of the initiative and ensure that it delivers the expected benefits and value to the organization. Reference := What is an IT Steering Committee? – BMC Software | Blogs, Steering Committee: Definition, Roles & Meeting Tips - ProjectManager, How To Create an IT Steering Committee in 6 Steps - Indeed



A recent benchmarking analysis has indicated an IT organization is retaining more data and spending significantly more on data retention than its competitors.
Which of the following would BEST ensure the optimization of retention costs?

  1. Requiring that all business cases contain data deletion and retention plans
  2. Revalidating the organization's risk tolerance and re-aligning the retention policy
  3. Moving all high-risk and medium-risk data backups to cloud storage
  4. Redefining the retention policy to align with industry best practices

Answer(s): B

Explanation:

Revalidating the organization’s risk tolerance and re-aligning the retention policy is the best option to ensure the optimization of retention costs, because it can help the organization balance the trade-off between the benefits and costs of data retention. By revalidating the risk tolerance, the organization can identify the optimal level of data retention that minimizes the exposure to legal, regulatory, and operational risks, while also reducing the storage and management costs. By re-aligning the retention policy, the organization can ensure that the data retention practices are consistent with the risk tolerance and reflect the current business needs and objectives. A re-aligned retention policy can also help the organization comply with data retention laws and regulations, avoid unnecessary data hoarding, and improve data quality and accessibility. Reference := Data Retention Policy 101: Best Practices, Examples & More - Intradyn, Data Retention 101: Policies and Best Practices | Egnyte, Best Practices for Data Retention and Policy Creation Will Optimize Storage Management, Data Retention Policy: Crafting Strategy for Compliance and Access



Which of the following MOST effectively prevents an IT system from becoming technologically obsolete before its planned return on investment (ROi)?

  1. Requesting periodic third-party assessments of the system throughout its life
  2. Obtaining long-term support commitments from the system platform vendors)
  3. Obtaining independent assurance that the system will conform to future business requirements
  4. Ensuring that the system is maintained in compliance with enterprise architecture (EA) standards

Answer(s): D

Explanation:

 Ensuring that the system is maintained in compliance with enterprise architecture (EA) standards is the most effective way to prevent an IT system from becoming technologically obsolete before its planned return on investment (ROI), because it ensures that the system is aligned with the current and future business needs, goals, and strategies of the organization. Enterprise architecture (EA) standards define the principles, guidelines, and best practices for designing, developing, and managing IT systems in a consistent, coherent, and integrated manner across the organization. By following EA standards, IT leaders can ensure that the system is compatible with the existing and emerging technologies, platforms, and frameworks that support the business processes and functions. EA standards also help IT leaders to monitor and evaluate the performance, quality, security, and reliability of the system, and to identify and address anygaps, issues, or risks that may affect its functionality or value. EA standards also facilitate the communication and collaboration among different stakeholders involved in the system lifecycle, such as business users, IT staff, vendors, and auditors. By maintaining the system in compliance with EA standards, IT leaders can ensure that the system delivers the expected benefits and value to the organization and achieves its planned ROI. Reference := ISO/IEC/IEEE 42020:2019(en), Software, systems and enterprise ?
Architecture processes, Sample: Enterprise Architecture Standards -CIO Portal, Obsolescence management for IT leaders - Information Age



The board of a start-up company has directed the CIO to develop a technology resource acquisition and management policy.
Which of the following should be the MOST important consideration during the development of this policy?

  1. Enterprise growth plans
  2. Industry best practices
  3. Organizational knowledge retention
  4. IT staff competencies

Answer(s): A

Explanation:

Enterprise growth plans should be the most important consideration during the development of a technology resource acquisition and management policy, because they define the vision, goals, and strategies of the start-up company and how technology can support them. A technology resource acquisition and management policy should align with the enterprise growth plans and ensure that the technology resources are acquired and managed in a way that enables the company to achieve its desired outcomes, such as increasing market share, enhancing customer satisfaction, improving operational efficiency, or creating innovative products or services. A technology resource acquisition and management policy should also consider the scalability, flexibility, and adaptability of the technology resources to accommodate the changing needs and demands of the company as it grows and evolves. A technology resource acquisition and management policy should also balance the costs and benefits of acquiring and managing technology resources and ensure that they deliver value to the company and its stakeholders.
Reference := Managing Technology as a Business Strategy, A Complete Guide To Strategic Technology Planning, Policy on IT Acquisition Strategies and Planning Under FITARA



When developing effective metrics for the measurement of solution delivery, it is MOST important to:

  1. establish project controls and monitoring objectives.
  2. perform an objective analysis of the project roadmap.
  3. establish the objectives and expected benefits.
  4. specify quantitative measures for solution delivery.

Answer(s): C

Explanation:

Establishing the objectives and expected benefits is the most important step when developing effective metrics for the measurement of solution delivery, because it defines the purpose, scope, and value of the solution and how it aligns with the business goals and needs. By establishing the objectives and expected benefits, IT leaders can identify the key performance indicators (KPIs) that will measure the progress, quality, and outcomes of the solution delivery. KPIs are specific, measurable, achievable, relevant, and time-bound metrics that track and evaluate the performance of the solution delivery against the objectives and expected benefits. KPIs can also help IT leaders to communicate the value proposition of the solution to the stakeholders, monitor and manage the risks and issues that may affect the solution delivery, and ensure that the solution meets or exceeds the expectations of the customers and users. Reference := Automation: metrics that measure success, 4 Types of Key Performance Metrics To Track (With Examples), A guide to measuring benefits effectively



Which of the following is the BEST indication of effective IT-business strategic alignment?

  1. Business management is involved as IT strategies are developed.
  2. IT senior management is required to report to the board.
  3. Business strategy is documented to allow IT architecture to be designed quickly.
  4. IT-business collaboration results in a strategy focused on IT cost reduction.

Answer(s): A

Explanation:

Business management involvement as IT strategies are developed is the best indication of effective IT-business strategic alignment, because it ensures that the IT strategies are aligned with the business goals, needs, and expectations, and that the business stakeholders have a clear understanding and ownership of the IT initiatives. Business management involvement can also facilitate the communication, collaboration, and coordination between the IT and business functions, and help resolve any conflicts or issues that may arise during the IT strategy development process. Business management involvement can also foster a culture of trust, mutual respect, and shared vision between the IT and business functions, and enhance the value proposition and performance of the IT strategies. Reference := IT Strategic Planning and Alignment: Best Practices, What Is “IT-Business Alignment”?, Aligning IT and Business Strategy for Project Success



Viewing page 41 of 88
Viewing questions 321 - 328 out of 700 questions


Post your Comments and Discuss ISACA CGEIT exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!