CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ272

Risk Optimization

An enterprise is evaluating whether to use wearable technology. It has no previous experience with this technology and has asked the chief technology officer (CTO) to evaluate its impact on the enterprise. The CTO should FIRST:

  • A prioritize wearable technology risk.
  • B understand the enterprise's risk tolerance.
  • C map the business goals to IT risk processes.
  • D create an IT risk scorecard.
Explanation

Understanding the enterprise’s risk tolerance establishes the acceptable level of exposure against which wearable-technology risks can be evaluated and prioritized. Risk prioritization, IT risk-process alignment, and scorecard design should follow that determination.

Community Discussion

No comments yet. Be the first to start the discussion!