QUESTION: 165

To ensure IT risk is managed in a consistent manner, it is MOST important for IT governance to establish a:

risk management reporting tool to ensure compliance.
balanced scorecard that includes IT risks.
risk management committee to identify IT-related risks.
risk management framework.

Answer(s): C

An independent consultant has been hired to conduct an ad hoc audit of an enterprise's information security office with results reported to the IT governance committee and the board. Which of the following is MOST important to provide to the consultant before the audit begins?

The scope and stakeholders of the audit
The organizational structure of the security office
The polices and framework used by the security office
Acceptance of the audit risks and opportunities

Answer(s): A

Reveal Solution Next Question

QUESTION: 167

The PRIMARY reason for using quantitative criteria in developing business cases for IT projects is to:

benchmark project success with similar enterprises.
learn lessons from errors made in past projects.
improve the process of evaluating returns after implementation.
apply other corporate standards to the development project.

Answer(s): C

Reveal Solution Next Question

QUESTION: 168

A CIO is planning to implement an enterprise resource planning (ERP) system at the request of the business. Of the following, who is accountable for providing sponsorship for the IT-enabled change across the enterprise?

CIO
CEO
IT strategy committee
Human resource director

Answer(s): C

Reveal Solution Next Question

Free CGEIT Exam Braindumps (page: 43)

QUESTION: 165

QUESTION: 166

QUESTION: 167

QUESTION: 168

CGEIT Discussions & Posts