ISACA CGEIT Exam Questions
Certified in the Governance of Enterprise IT (Page 5 )

Updated On: 17-Feb-2026

The board of directors of an enterprise has questioned whether the business is focused on optimizing value. The IT strategy committee's BEST action to address the board's concern is to:

  1. initiate reporting and review of key IT performance metrics.
  2. form a technology council to monitor the efficiency of project implementation.
  3. conduct a portfolio review to assess the benefits realization of IT investments.
  4. conduct a benchmark to assess IT value relative to competitors.

Answer(s): A



A CEO determines the enterprise is lagging behind its competitors in consumer mobile offerings, and mandates an aggressive rollout of several new mobile services within the next 12 months. To ensure the IT organization is capable of supporting this business objective, the enterprise's CIO should FIRST:

  1. procure contractors with experience in mobile application development.
  2. task direct reports with creating training plans for their teams.
  3. create a sense of urgency with the IT team that mobile knowledge is mandatory.
  4. request an assessment of current in-house mobile technology skills.

Answer(s): D



Following a merger of two major corporations, the new strategic goal is “One business function. One IT system.” Which of the following should be the FIRST step to achieve this goal?

  1. Form a combined IT steering committee.
  2. Document requirements for each business function.
  3. Create a standard enterprise architecture.
  4. Define service level agreements with each business function.

Answer(s): B



Which of the following is the BEST approach to ensure IT technical competencies support the enterprise?

  1. Ensure there is adequate budget for IT technical training.
  2. Determine training requirements from customer service satisfaction surveys.
  3. Align training requirements to the capabilities needed to support the business strategy.
  4. Hold annual job fairs targeting new graduates in IT technical fields.

Answer(s): C


Reference:

https://www.mckinsey.com/~/media/McKinsey/Industries/Financial%20Services/Our%20Insights/Next-gen%20technology%20transformation%20in%20financial%20services/Next-gen-technology-transformation-in-financial-services.ashx



A data governance strategy has been defined by the IT strategy committee which includes privacy objectives related to access controls, authorized use, and data collection. Which of the following should the committee do NEXT?

  1. Mandate the creation of a data privacy policy.
  2. Establish a data privacy budget.
  3. Perform a data privacy impact assessment.
  4. Mandate data privacy training for employees.

Answer(s): A






Post your Comments and Discuss ISACA CGEIT exam dumps with other Community members:

Join the CGEIT Discussion