Online Access Free CGEIT Exam Questions

An enterprise recently experienced a major breach that was escalated effectively. However, the recovery took far longer than expected, resulting in significant financial loss. Which of the following is MOST likely the root cause of this scenario?

• A.The business continuity plan (BCP) was not recently tested
• B.The disaster recovery plan (DRP) was not routinely updated
• C.Key performance indicators (KPIs) were not regularly monitored
• D.The recovery point objective (RPO) was not established

Which of the following BEST enables effective enterprise risk management (ERM)?

• A.Risk training
• B.Risk tolerance
• C.Risk register
• D.Risk ownership

IT has launched new portfolio management policies and processes to improve the alignment of IT projects with enterprise goals. The latest audit report indicates that no improvement has been made due to confusion in the decision-making process. Which of the following is the BEST course of action for the CIO?

• A.Develop and communicate an accountability matrix.
• B.Create an IT portfolio management risk framework.
• C.Deliver prioritization and facilitation training.
• D.Implement a performance management framework.

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the:

• A.the risk cost burden to achieve compliance.
• B.readiness of IT systems to address
• C.disruption to normal business operations.
• D.risk profile of the enterprise.

The IT program manager does not see the value of conducting risk assessments for a new major IT project.
The manager is reluctant to cooperate with internal auditors and the newly formed steering committee.
Midway through the project, program requirements were changed because the CEO is a friend of a vendor and wants to implement this vendor's new technology. This decision will cause the current IT program budget to be insufficient and will be shown as overspending.
After the requirement change request, the IT program manager should FIRST:

• A.report the matter to internal audit as a program deviation to be reviewed.
• B.obtain confirmation from the business and a decision by the steering committee.
• C.request additional funding from the business owner to cover the additional scope.
• D.align IT with the business and agree to the business request.