CISA IT Governance and Strategy 5

Question 1

An organization wants to improve IT governance maturity from level 2 to level 3 on a five-level scale. This MOST likely requires:

Accepted Answer

Formalizing and documenting processes consistently across the organization

Answer

Moving from maturity level 2 (repeatable but intuitive) to level 3 (defined process) requires formalizing, documenting, and standardizing processes organization-wide.

Question 2

Which of the following scenarios BEST demonstrates effective IT governance?

Accepted Answer

The board reviews quarterly IT performance dashboards and adjusts strategy accordingly

Answer

Board-level review of IT performance metrics with strategic adjustment demonstrates the evaluate-direct-monitor cycle central to effective IT governance.

Question 3

In the COBIT framework, which domain is MOST directly concerned with IT governance rather than IT management?

Accepted Answer

Evaluate, Direct, and Monitor (EDM)

Answer

The EDM (Evaluate, Direct, and Monitor) domain in COBIT 2019 represents governance processes, while other domains represent management processes.

Question 4

A company has strong IT controls but no formal IT governance structure. The MOST likely consequence is:

Accepted Answer

IT controls may not address the right risks or business priorities

Answer

Without governance directing which risks matter most, even strong controls may protect against the wrong threats while leaving strategic risks unaddressed.

Question 5

Which of the following is MOST important when defining IT governance roles and responsibilities?

Accepted Answer

Clearly defining decision rights, accountability, and escalation paths

Answer

Effective governance requires that decision rights, accountability, and escalation procedures be unambiguously defined so that the right decisions are made at the right level.

CISA - Certified Information Systems Auditor Practice Test

CISA - Certified Information Systems Auditor Practice Test

CISA IT Governance and Strategy 5