Risk appetite is the amount and type of risk that an organization is willing to accept in pursuit of its objectives. Risk appetite of the enterprise should be the primary consideration when developing a risk management policy for a portfolio of IT-enabled investments, because it helps to align the risk management strategy with the business strategy and goals. Risk appetite also helps to define the risk tolerance and thresholds for each investment, and to prioritize and allocate resources accordingly. Risk appetite also helps to communicate the expectations and responsibilities of the stakeholders involved in the risk management process, and to foster a risk-aware culture within the organization. Reference:= CGEIT Review Manual, Chapter 4: Risk Optimization, Section 4.1: IT Risk Management Strategy, Subsection 4.1.1: Establishing IT Risk Appetite, Page 139.

Delaying the control review of a payroll system project until after its implementation increases the risk of discovering control weaknesses or errors that could have been prevented or corrected earlier. This would result in increased cost to mitigate the deficiencies and ensure the system's reliability and compliance. References:
CGEIT Domain 4: Risk Optimization

Data conversion is the process of transforming data from one format or system to another. It is a critical activity in any data migration or integration project, as it affects the quality, accuracy, and usability of the data.
Therefore, IT governance should mandate that data conversion has documented approvals from business process data owners, who are the stakeholders responsible for defining and maintaining the data requirements, standards, and quality for their respective business processes. This ensures that the data conversion meets the business needs and expectations, as well as complies with the relevant policies and regulations. References:
* CGEIT Review Manual 2021, Chapter 4: Resource Optimization, Section 4.2: Data Management, page
1651
* CGEIT Review Questions, Answers & Explanations Manual 2021, Question 10, page 252
* Data Conversion: Definition, Best Practices, and Examples3
* Data Governance Roles and Responsibilities4