Which of the following is the PRIMARY ongoing responsibility of the IT governance function related to risk?

1. A. Responding to and controlling all IT risk events
2. B. Communicating the enterprise risk management plan
3. C. Ensuring IT risk management is aligned with business risk appetite
4. D. Verifying that all business units have staff skilled at assessing risk

Correct Answer: C

Which of the following provides the BEST information to assess the effective alignment of IT investments?

1. A. IT balanced scorecard
2. B. Net present value (NPV).
3. C. IT delivery time metrics
4. D. Total cost of ownership (TCO)

Correct Answer: A

Which of the following is the BEST course of action to enable effective resource management?

1. A. Conduct an enterprise risk assessment.
2. B. Implement a cross-training program.
3. C. Assign resources based on business priorities.
4. D. Assign resources based on risk appetite.

Correct Answer: B

Which of the following would be MOST useful for prioritizing IT improvement initiatives to achieve desired business outcomes?

1. A. Budget variance analysis
2. B. Enterprise architecture (EA)
3. C. IT skills matrix
4. D. Portfolio management

Correct Answer: D

Best practice states that IT governance MUST:

1. A. enforce consistent policy across the enterprise.
2. B. be applied in the same manner throughout the enterprise.
3. C. apply consistent target levels of maturity to processes.
4. D. be a component of enterprise governance.

Correct Answer: D