CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ137

Risk Optimization

An enterprise is planning to change its business direction. As a result, IT risk will increase significantly. Which of the following should be the CIO's FIRST course of action?

  • A Plan for the corresponding IT reorganization.
  • B Recommend delaying the business change.
  • C Report the risk to executive management.
  • D Implement IT changes to align with the plan.
Explanation

Significant IT risk created by a business-direction change must be reported to executive management promptly. Executive management is responsible for making informed business risk decisions, including whether the risk is acceptable and what treatment is required before organizational or technical changes proceed.

Community Discussion

No comments yet. Be the first to start the discussion!