CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ394

Risk Optimization

Senior management wants to encourage investment in IT but is unsure whether the related risks are being properly identified. The BEST way to address this concern is to:

  • A ensure business cases are developed by IT.
  • B engage an external consultant to develop risk scenarios.
  • C assign an IT cost controller to the finance department.
  • D appoint an IT representative to the business risk committee.
Explanation

Placing an IT representative on the business risk committee integrates IT knowledge into enterprise risk governance, enabling IT investment risks to be identified, evaluated, and managed as part of the organization’s regular risk process.

Community Discussion

No comments yet. Be the first to start the discussion!