Which of the following is the BEST way to address an IT audit finding that many enterprise application updates lack appropriate documentation?

1. A. Enforce change control procedures.
2. B. Conduct software quality audits
3. C. Review the application development life cycle.
4. D. Add change control to the risk register.

Correct Answer: B

When preparing a new IT strategic plan for board approval, the MOST important consideration is to ensure the plan identifies:

1. A. roles and responsibilities that link to IT objectives.
2. B. specific resourcing requirements for identified IT projects.
3. C. frameworks that will be aligned to IT programs.
4. D. implications of the strategy on the procurement process.

Correct Answer: A

A health tech enterprise wants to ensure that its in-house developed mobile app for users complies with data privacy regulations. Which of the following should be identified FIRST when creating an inventory of information systems and data related to the mobile app?

1. A. Data maintained by vendors
2. B. Vendors and outsourced systems
3. C. Application and data owners
4. D. Information classification scheme

Correct Answer: D

A global enterprise is experiencing an economic downturn and is rapidly losing market share. IT senior management is reassessing the core activities of the business, including IT, and the associated resource implications. Management has decided to focus on its local market and to close international operations. A critical issue from a resource management perspective is to retain the most capable staff. This is BEST achieved by:

1. A. reviewing current goals-based performance appraisals across the enterprise.
2. B. ranking employees across the enterprise based on their compensation.
3. C. ranking employees across the enterprise based on length of service.
4. D. retaining capable staff exclusively from the local market.

Correct Answer: D

As part of the implementation of IT governance, the board of an enterprise should establish an IT strategy committee to:

1. A. provide input to and ensure alignment of the enterprise and IT strategies.
2. B. ensure IT risks inherent in the enterprise strategy implementation are managed
3. C. drive IT strategy development and take responsibility for implementing the IT strategy.
4. D. assume governance accountability for the business strategy on behalf of the board

Correct Answer: A