An enterprise's internal audit group has scheduled a control review of a payroll system project but has been told to wait until the system is implemented. Which of the following is the GREATEST risk associated with the delay?

1. A. delay in the development of new key performance indicators (KPIs)
2. B. Continued dependency on compliant legacy systems
3. C. Increased cost to mitigate deficiencies
4. D. Lack of adherence to industry best practices

Correct Answer: C

The CEO of an organization is concerned that there are inconsistencies in the way information assets are classified across the enterprise. Which of the following is be the BEST way for the CIO to address these concerns?

1. A. Include data assets in the IT inventory.
2. B. Identify data owners across the enterprise.
3. C. Require enterprise risk assessments.
4. D. Implement enterprise data governance.

Correct Answer: D

An enterprise considering implementing IT governance should FIRST develop the scope of the IT governance program and:

1. A. initiate the program using an implementation roadmap.
2. B. establish initiatives for business and managers.
3. C. acquire the resources that will be required.
4. D. communicate the program to stakeholders to gain consensus.

Correct Answer: D

Facing financial struggles, a CEO mandated severe budget cuts. A decision was also made to immediately change the enterprise strategic focus to put more reliance on mobile, cloud, and wireless services in an effort to boost revenue. The IT steering committee has asked the CIO to suggest adjustments to the current IT project portfolio to allow support for the new direction despite fewer funds. What should the CIO advise the committee to do FIRST?

1. A. Ask business stakeholders to discuss their vision for the new strategy.
2. B. Cancel projects with a net present value (NPV) below a defined threshold.
3. C. Conduct a risk assessment against the potential new services.
4. D. Start re-allocating budget to projects involving mobile or cloud.

Correct Answer: C

Following a strategic planning session, new IT objectives were announced. Which of the following is the MOST effective way for the CIO to ensure these objectives are cascaded to IT personnel?

1. A. Communicate the new IT objectives during a staff meeting.
2. B. Define individual performance measures related to the IT objectives.
3. C. Establish IT management's performance measures based on the IT objectives.
4. D. Update the IT balanced scorecard to align with the new IT objectives.

Correct Answer: B