CGEIT IT Compliance and Assurance

Question 1

In IT governance, 'compliance' PRIMARILY refers to:

Accepted Answer

Adherence to laws, regulations, standards, and internal policies applicable to IT

Answer

Achieving the lowest possible IT operational cost

Answer

Completing all IT projects on schedule

Answer

Maintaining uptime above a defined threshold

Question 2

Which US regulation MOST directly requires IT governance controls over financial reporting systems?

Accepted Answer

Sarbanes-Oxley Act (SOX)

Answer

Health Insurance Portability and Accountability Act (HIPAA)

Answer

General Data Protection Regulation (GDPR)

Answer

Federal Information Security Management Act (FISMA)

Question 3

An IT compliance audit PRIMARILY evaluates whether:

Accepted Answer

IT controls and practices conform to required standards, regulations, or policies

Answer

IT projects are delivered on time and within budget

Answer

IT vendors are meeting their contractual obligations

Answer

IT staff have completed mandatory training

Question 4

The concept of 'IT assurance' BEST refers to:

Accepted Answer

Independent validation that IT controls are operating effectively and reliably

Answer

Guarantees provided by IT vendors in service contracts

Answer

IT staff confidence in system performance

Answer

Automated monitoring of network uptime

Question 5

Which standard is MOST commonly used as a framework for IT controls assurance in US organizations?

Accepted Answer

COBIT (Control Objectives for Information and Related Technologies)

Answer

ITIL (IT Infrastructure Library)

Answer

TOGAF (The Open Group Architecture Framework)

Answer

PMBOK (Project Management Body of Knowledge)

Question 6

A 'control deficiency' identified during an IT audit MOST requires:

Accepted Answer

A documented remediation plan with assigned ownership and target dates

Answer

Immediate shutdown of the affected IT system

Answer

Public disclosure to all stakeholders

Answer

Transfer of responsibility to an external vendor