Isaca Updated CGEIT Exam Questions and Answers by siya

 Process owners are responsible for ensuring the regular review of quality management performance against defined quality metrics, as they are accountable for the design, implementation and improvement of the processes they own. Risk management team, internal auditors and executive management have other roles and responsibilities in relation to quality management, such as providing assurance, oversight and direction. References: : CGEIT Review Manual (Digital Version), Chapter 3: Benefits Realization, Section 3.2: IT Investment Management, Subsection 3.2.4: IT Investment Management Process, Page 104 : CGEIT Review Manual (Digital Version), Chapter 3: Benefits Realization, Section 3.4: Quality Management, Subsection 3.4.1: Quality Management Overview, Page 120

Requesting an IT security assessment to identify the main security gaps is the IT governance board’s first course of action, as it helps to understand the root causes and the extent of the information security incidents that have affected the enterprise’s business reputation. An IT security assessment can also provide recommendations and best practices for improving thesecurity posture and reducing the risks of future incidents12. References := CGEIT Exam Content Outline, Domain 4, Subtopic B: IT Risk Management, Task 1: Ensure that an IT risk management framework exists to identify, analyze, mitigate, manage, monitor, and communicate IT-related business risk, and that the framework for IT risk management is in alignment with the enterprise risk management (ERM) framework.

The board of directors’ first course of action when a strategic IT-enabled investment is failing due to unforeseen technology problems should be to assess the business risk and options. This means that the board should evaluate the impact of the technology problems on the business objectives, benefits, costs, and risks of the investment, as well as the feasibility and desirability of alternative courses of action, such as continuing, modifying, suspending, or terminating the investment. This will help the board to make an informed and rational decision based on the best available information and evidence.

Assurance of the execution of business controls is the primary element in sustaining an effective governance framework, as it ensures that the IT governance processes and activities are performed in accordance with the established policies, standards, and procedures. Assurance also provides feedback and monitoring on the performance, compliance, and outcomes of the IT governance framework, and identifies areas for improvement and optimization12. References := CGEIT Exam Content Outline, Domain 1, Subtopic A: Governance Framework, Task 5: Ensure that assurance processes are established to provide confidence that the IT governance framework is designed and operating effectively.