CGEITPreview

An enterprise has decided to create its first mobile application. The IT director is concerned about the potential impact of this initiative. Which of the following is the MOST important input for managing the risk associated with this initiative?

Which of the following is the MOST important reason for selecting IT key risk indicators (KRIs)?

When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action?

Which of the following should be the MOST essential consideration when outsourcing IT services?

Which of the following is the MOST important input for the development of a human resources strategy to address IT skill gaps?

An IT governance committee recently received a report indicating a scarcity of key IT skills in the marketplace to meet the core needs of the business. Reviewing which of the following would BEST help the committee respond to this situation?

Senior management has made a decision to automate a number of key controls due to concerns that current IT risk controls are overly cumbersome and adversely impacting IT agility. Which of the following should be required FIRST to facilitate this process?

The IT function received only 50% of the requested funding to support the IT strategy for new business initiatives. Which of the following is the CIO's MOST important course of action before considering alternative resource options?

The BEST way for a CIO to monitor the alignment between the business and IT strategy is to regularly review:

Which of the following should be the FIRST step for executive management to take in communicating what is considered acceptable use with regard to personally owned devices for company business?

An enterprise has decided to utilize a cloud vendor for the first time to provide email as a service, eliminating in-house email capabilities. Which of the following IT strategic actions should be triggered by this decision?

Who should be accountable for quantifying the business impact of a potential breach of a server containing retail transactions for the last year?

Which of the following is the MOST appropriate mechanism for measuring overall IT organizational performance?

The PRIMARY reason for periodically evaluating IT resource staffing requirements is to:

A CEO wants to establish a governance framework to facilitate the alignment of IT and business strategies. Which of the following should be a KEY requirement of this framework?

Which of the following should be the PRIMARY goal of implementing service level agreements (SLAs) with an outsourcing vendor?

Of the following, the BEST response to the absence of a data security breach notification by a service provider is to contractually require that:

A multinational enterprise is planning to migrate to cloud-based systems. Which of the following should be of MOST concern to the risk management committee?

In a large enterprise, which of the following should be responsible for the implementation of an IT balanced scorecard?

A steering committee has been advised by the IT project management office that individual business units are building systems components that could be leveraged by other business units. Instead, identical components are being duplicated across the enterprise. Which of the following committee directives would be the BEST way to reduce the likelihood of this duplication?

To support the enterprise's digital transformation, the CIO has been asked to include an Internet of Things (IoT) component in the IT strategy. Which of the following should be the FIRST consideration?

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the:

A regulatory audit of an IT department has identified discrepancies between processes described in the procedures and what is actually done by system administrators. The discrepancies were caused by recent IT application changes. Which of the following would be the BEST way to prevent the recurrence of similar findings in the future?

Which of the following is the MOST important input for designing a development program to help IT employees improve their ability to respond to business needs?