QUESTION: 13

Which of the following would be the BEST way for an enterprise to address new legal and regulatory requirements applicable to IT?

Benchmark how other IT organizations are treating the new requirements.
Adopt a zero-tolerance approach for noncompliance with regulatory matters.
Treat as a risk to be assessed before developing a response.
Use a cost-benefit analysis to determine if compliance is warranted.

Answer(s): D

Reveal Solution Next Question

QUESTION: 14

Which of the following is MOST critical for sustaining a newly implemented IT governance program?

Launch an enterprise-wide IT governance awareness program.
Designate a board representative to sponsor the IT governance program.
Ensure that there are IT policies, procedures, and standards in place.
Benchmark the program periodically against industry peers.

Answer(s): C

Reveal Solution Next Question

An enterprise decides to accept the IT risk of a subsidiary located in another country even though it exceeds the enterprise's risk appetite. Which of the following would be the BEST justification for this decision?

Local market common practices
Risk framework alignment
Technical gaps among subsidiaries
Compliance with local regulations

Answer(s): C

Reveal Solution Next Question

QUESTION: 16

The board of directors of an enterprise has questioned whether the business is focused on optimizing value. The IT strategy committee's BEST action to address the board's concern is to:

initiate reporting and review of key IT performance metrics.
form a technology council to monitor the efficiency of project implementation.
conduct a portfolio review to assess the benefits realization of IT investments.
conduct a benchmark to assess IT value relative to competitors.

Answer(s): A

Reveal Solution Next Question

Free CGEIT Exam Braindumps (page: 5)

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16