CGEIT: Certified in the Governance of Enterprise ITDemo

Question

Before defining IT key risk indicators, which of the following should be established FIRST?

A IT risk and security framework
B IT key performance indicators
C IT goals and objectives
D IT resource strategy

Explanation

IT goals and objectives define the intended outcomes that IT must achieve. Key risk indicators are selected to provide early warning of risks that could prevent those outcomes, so they must be aligned to those goals and objectives.

Learn more

ISACA: Indicator Management—A Question That Should Start With Why

CGEIT: Certified in the Governance of Enterprise ITDemo

AstroTutor

Notes

Readiness

QuestionQ165

Community Discussion