- (Exam Topic 4)
Which of the following is the PRIMARY role of key performance indicators (KPIs) in supporting business process effectiveness?

1. A. To enable conclusions about me performance of the processes and target variances tor follow-up analysis
2. B. To analyze workflows in order to optimize business processes and eliminate tasks that do not provide value
3. C. To assess the functionality of a software deliverable based on business processes

Correct Answer: A

- (Exam Topic 2)
Which of the following BEST demonstrates that IT strategy Is aligned with organizational goals and objectives?

1. A. IT strategies are communicated to all Business stakeholders
2. B. Organizational strategies are communicated to the chief information officer (CIO).
3. C. Business stakeholders are Involved In approving the IT strategy.
4. D. The chief information officer (CIO) is involved In approving the organizational strategies

Correct Answer: C

- (Exam Topic 1)
Which of the following tests would provide the BEST assurance that a health care organization is handling patient data appropriately?

1. A. Compliance with action plans resulting from recent audits
2. B. Compliance with local laws and regulations
3. C. Compliance with industry standards and best practice
4. D. Compliance with the organization's policies and procedures

Correct Answer: B

- (Exam Topic 4)
Which of the following would BEST help to ensure that an incident receives attention from appropriate personnel in a timely manner?

1. A. Completing the incident management log
2. B. Broadcasting an emergency message
3. C. Requiring a dedicated incident response team
4. D. Implementing incident escalation procedures

Correct Answer: D

- (Exam Topic 4)
Which of the following should be of GREATEST concern to an IS auditor when auditing an organization's IT strategy development process?

1. A. The IT strategy was developed before the business plan
2. B. A business impact analysis (BIA) was not performed to support the IT strategy
3. C. The IT strategy was developed based on the current IT capability
4. D. Information security was not included as a key objective m the IT strategic plan.

Correct Answer: B