Framework and Strategic Management Flashcards

An IT investment review board wants to ensure that IT will be able to support business initiatives. Each initiative is comprised of several interrelated IT projects. Which of the following would help ensure that the initiatives meet their goals?

Answer: Establishment of portfolio management

Explanation: Portfolio management involves managing a collection of projects and initiatives as a portfolio to achieve strategic objectives. It helps ensure that each initiative aligns with business goals and objectives by providing oversight, prioritization, and resource allocation across interrelated IT projects. This approach enables the IT investment review board to effectively support business initiatives by coordinating efforts, managing risks, and optimizing resource utilization across the portfolio of initiatives.

An enterprise has decided to use third-party software for a business process which is hosted and supported by the same third party. The BEST way to provide quality of service oversight would be to establish a process:

Answer: to qualify service providers.

Explanation: Qualifying service providers involves establishing criteria for selecting third-party vendors based on their capabilities, reputation, and ability to meet the enterprise's service requirements. By thoroughly vetting and qualifying service providers before engaging with them, the enterprise can ensure that they are capable of delivering high-quality services and support. This process helps mitigate risks associated with relying on third-party software and ensures that the enterprise selects a provider who can uphold the desired level of service quality.

In a successful enterprise that is profitable in its marketplace and consistently growing in size, the non-IT workforce has grown by 50% in the last two years. The demand for IT staff in the marketplace is more than the supply, and the enterprise is losing staff to rival organizations. Due to the rapid growth, IT has struggled to keep up with the enterprise, and IT procedures and associated job roles are not well-defined. The MOST critical activity for reducing the impact caused by IT staff turnover is to:

Answer: document processes and procedures.

Explanation: Documenting processes and procedures is crucial because it ensures that knowledge is captured and transferred effectively within the IT department. This documentation helps new hires understand their roles, responsibilities, and how tasks should be performed, thereby reducing the learning curve and minimizing the disruption caused by turnover.

A business has outsourced IT operations to several third-party providers, but service level agreements (SLAs) are not clearly defined in all cases. Which of the following is the GREATEST risk to the business?

Answer: Quality of services is not enforceable.

Explanation: Without clearly defined SLAs, the business lacks a formal agreement specifying the expected level of service quality, performance metrics, and remedies for failure to meet these standards. This ambiguity can lead to inconsistent service delivery, disputes over service quality, and difficulties in holding the third-party providers accountable.

A large enterprise has been experiencing a high turnover of skilled IT personnel, resulting in a significant loss of knowledge within the IT department. Which of the following should be done FIRST to address this problem?

Answer: Conduct a survey of current IT staff.

Explanation: Conducting a survey of current IT staff will help gather insights into the reasons for turnover, understand their concerns, and identify areas where improvements are needed. This step is crucial for diagnosing the root causes of the turnover problem and informing subsequent actions effectively.

A newly established IT steering committee is concerned whether or not a system is meeting availability objectives. Which of the following will provide the BEST information to make an assessment?

Answer: Capability maturity levels

Explanation: Capability maturity levels, such as those defined in models like CMMI (Capability Maturity Model Integration), assess the maturity and effectiveness of an organization's processes, including those related to system availability. By evaluating the maturity level of processes related to system availability management, the IT steering committee can gain insights into how well the organization's practices align with best practices and standards. This assessment helps in understanding the organization's capability to consistently meet availability objectives over time.

Following a major IT incident that resulted in a loss to the enterprise, a CIO is preparing for a meeting with the board of directors to discuss what may have failed internally. Which of the following should the CIO do FIRST to provide assurance to the board?

Answer: Ensure IT and enterprise risk management alignment.

Explanation: Ensuring alignment between IT and enterprise risk management is critical because it demonstrates that the organization's IT risks are being managed in line with broader enterprise risk management objectives. This includes assessing how the incident occurred in relation to overall risk management strategies, identifying any gaps or inconsistencies, and ensuring that future risk mitigation efforts are aligned with enterprise goals. By establishing this alignment, the CIO can provide the board with assurance that IT risks are being managed comprehensively and that measures are in place to prevent similar incidents from occurring in the future.

A newly appointed CIO has issued a new IT strategic plan. Which of the following would be the MOST effective way for the CIO to ensure the IT management team is held accountable for the delivery of the plan?

Answer: Revise the managers' performance goals to include key objectives.

Explanation: By revising the managers' performance goals to include key objectives from the IT strategic plan, the CIO directly ties individual accountability to the achievement of strategic goals. This approach aligns the efforts of the IT management team with the overarching strategic direction of the organization, making it clear what is expected from each manager in terms of delivering specific outcomes outlined in the plan. It provides a structured framework for measuring performance and progress towards strategic objectives.

The BEST way for a CIO to monitor the alignment between the business and IT strategy is to regularly review:

Answer: IT services supporting business processes.

Explanation: Regularly reviewing IT services that support business processes allows the CIO to directly assess how well IT operations and services are aligned with the needs and objectives of the business. This includes evaluating whether IT services are effectively enabling and enhancing business processes, contributing to operational efficiency, and supporting strategic goals. By monitoring this alignment, the CIO can identify areas where IT services may need to be adjusted or improved to better align with evolving business priorities.

Which of the following is PRIMARILY achieved through performance measurement?

Answer: Process improvement

Explanation: Performance measurement allows organizations to assess the effectiveness and efficiency of their processes. By measuring key performance indicators (KPIs), organizations can identify areas where processes can be optimized, streamlined, or redesigned to improve efficiency, reduce waste, and enhance overall effectiveness. Process improvement is directly facilitated by performance measurement because it provides the data and insights necessary to identify areas for improvement and track progress over time.

While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's:

Answer: enterprise architecture.

Explanation: Understanding an organization's enterprise architecture is indeed crucial when assessing the feasibility of introducing new IT practices and standards. Enterprise architecture provides a structured approach to aligning IT capabilities with business goals and requirements. It includes aspects such as the current IT infrastructure, systems, applications, data flows, and integration points across the organization. This understanding helps in evaluating how new IT practices and standards can be integrated into the existing architecture, identifying potential impacts, dependencies, and areas needing adaptation or enhancement.