CGEIT: Certified in the Governance of Enterprise IT

Question

A regulatory audit found an enterprise’s primary transactional application to be noncompliant. Beyond fines and mandated remediation, an agreement was made to establish a set of IT governance controls. To whom is accountability for these controls BEST assigned?

Explanation

The board of directors has ultimate accountability for IT governance, including ensuring that appropriate governance controls address regulatory obligations and organizational risk. Management, including the CIO, implements and operates those controls; internal audit independently evaluates them.

CGEIT: Certified in the Governance of Enterprise IT

AstroTutor

Notes

Readiness

QuestionQ32

Community Discussion