An enterprise's board of directors has asked the CIO to implement ways to make the IT function more environmentally responsible. Which of the following should be the CIO's FIRST step to ensure continued alignment of IT needs with the requirements of the board?

Which of the following would be the BEST way to facilitate the adoption of strong IT governance practices throughout a multi-divisional enterprise?

There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to the perform quantitative risk analysis process?

Which of the following would be the MOST effective way to ensure IT capabilities are appropriately aligned with business requirements for specific business processes?

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the: