An enterprise is about to complete a major acquisition, and a decision has been made that both companies will be using the parent company's IT infrastructure. Which of the following should be done NEXT?

1. A. Update the enterprise architecture (EA).
2. B. Perform a business impact analysis (BIA.
3. C. Conduct a gap analysis.
4. D. Develop a communication plan to support the merger.

Correct Answer: C

A newly hired CIO has been told the enterprise has an established IT governance process, but finds it is not being followed. To address this problem, the CIO should FIRST

1. A. gain an understanding of the existing governance process and corporate culture.
2. B. replace the current governance process with one the CIO has successfully used before.
3. C. establish personal relationships with executive-level peers to leverage goodwill,
4. D. engage audit to review current governance processes and validate the ClO's concerns.

Correct Answer: A

An enterprise has lost an unencrypted backup tape of archived customer data. A data breach report is not mandatory in the relevant jurisdiction. From an ethical standpoint, what should the enterprise do NEXT?

1. A. Initiate disciplinary proceedings against relevant employees.
2. B. Mandate a review of backup tape inventory procedures.
3. C. Communicate the breach to customers.
4. D. Require an evaluation of storage facility vendors.

Correct Answer: C

Which of the following is MOST important to document for a business ethics program?

1. A. Guiding principles and best practices
2. B. Violation response matrix
3. C. Whistle-blower protection protocols.
4. D. Employee awareness and training content

Correct Answer: A

An enterprise is approaching the escalation date of a major IT risk. The IT steering committee wants to ascertain who is responsible for the risk response. Where should the committee find this information?

1. A. Resource management plan
2. B. RACl chart
3. C. Risk management plan
4. D. Risk register

Correct Answer: D