To ensure IT risk is managed in a consistent manner, it is MOST important for IT governance to establish a:

1. A. risk management committee to identify IT-related risks.
2. B. risk management framework.
3. C. balanced scorecard that includes IT risks.
4. D. risk management reporting tool to ensure compliance.

Correct Answer: B

Which of the following is the MOST comprehensive method to report on overall IT performance to the board of directors?

1. A. Balanced scorecard
2. B. Net present value (NPV)
3. C. Performance-based payments
4. D. Return on investment (ROI)

Correct Answer: A

When deciding to develop a system with sensitive data, which of the following is MOST important to include in a business case?

1. A. A risk assessment to determine the appropriate controls
2. B. Updated enterprise architecture (EA)
3. C. Skills gap analysis
4. D. The additional cost of encrypting sensitive data

Correct Answer: D

The board of directors has mandated the use of geolocation software to track mobile assets assigned to employees who travel outside of their home country. To comply with this mandate, the IT steering committee should FIRST request

1. A. the inclusion of mandatory training for remote device users.
2. B. an architectural review to determine appropriate solution design.
3. C. an assessment to determine if data privacy protection is addressed.
4. D. an update to the acceptable use policy.

Correct Answer: C

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the:

1. A. disruption to normal business operations.
2. B. risk profile of the enterprise.
3. C. readiness of IT systems to address
4. D. the risk cost burden to achieve compliance.

Correct Answer: C