Question 1

In a large enterprise, which of the following should be responsible for the implementation of an IT balanced scorecard?

Options :

A : Project management office

B : Chief information officer (CIO)

C : IT steering committee

D : Chief risk officer (CRO)

Answer: C

Question 2

Which of the following should be the FIRST action taken by a newly formed IT governance committee to ensure reports are compliant with regulations and identify key IT risks?

Options :

A : Direct the development of a reporting communication plan.

B : Develop and monitor IT key risk indicator (KRI) triggers.

C : Train end users on regulation requirements.

D : Implement a mechanism to ensure reporting escalation.

Answer: B

Question 3

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the:

Options :

A : cost burden to achieve compliance.

B : readiness of IT systems to address the risk.

C : risk profile of the enterprise.

D : disruption to normal business operations.

Answer: C

Question 4

Which of the following would be of MOST concern regarding the effectiveness of risk management processes?

Options :

A : Key risk indicators (KRIs) are not established.

B : Risk management requirements are not included in performance reviews.

C : The plans and procedures are not updated on an annual basis.

D : There is no framework to ensure effective reporting of risk events.

Answer: D

Question 5

An audit report has revealed that data scientists are analyzing sensitive "big data" files using an offsite cloud because corporate servers do not have the necessary processing capabilities. A review of policies indicates this practice is not prohibited. Which of the following should be the FIRST strategic action to address the report?

Options :

A : Authorize a risk analysis of the practice.

B : Update data governance practices.

C : Revise the information security policy.

D : Recommend the use of a private cloud.

Answer: A

Confidently Practice Online with Free CGEIT Exam Cram

Buying Options: