The MAIN responsibility of the board of directors regarding the management of enterprise risk is to:

1. A. ensure a risk process exists which addresses the risk appetite.
2. B. sustain investment in staff training regarding IT risk.
3. C. promote a benefits-driven culture throughout the enterprise.
4. D. maintain awareness of IT risk to the business.

Correct Answer: A

A large financial institution is considering outsourcing customer call center operations which will allow the chosen vendor to access systems from offshore locations. Which of the following represents the GREATEST risk?

1. A. Inconsistent customer service and reporting
2. B. Loss of data confidentiality
3. C. Lack of network availability
4. D. Inadequate business continuity planning

Correct Answer: B

Which of the following is the PRIMARY element in sustaining an effective governance framework?

1. A. Identification of optimal business resources
2. B. Establishment of a performance metric system
3. C. Ranking of critical business risks
4. D. Assurance of the execution of business controls

Correct Answer: B

The PRIMARY objective of IT resource planning within an enterprise should be to:

1. A. determine risk associated with IT resources.
2. B. maximize value received from IT.
3. C. determine IT outsourcing options.
4. D. finalize service level agreements (SLAs) for IT

Correct Answer: B

Which of the following should be the FIRST step in updating an IT strategic plan?

1. A. Revise the enterprise architecture (EA).
2. B. Review IT performance objectives and indicators.
3. C. Evaluate IT capabilities and resources.
4. D. Identify changes in enterprise goals.

Correct Answer: D