FREE CGEIT Risk and Resource Optimization Questions and Answers
Which of the following objectives can be the best coordinated with Human Resource Management?
Explanation:
Satisfying the business needs is considered the best objective that can be coordinated with Human Resource Management (HRM), as it emphasizes the strategic alignment of HR practices with organizational objectives and operational requirements.
In which of the following editions of COBIT was "Management Guidelines" added?
Explanation:
Management Guidelines were added in the second edition of COBIT (Control Objectives for Information and Related Technologies). This addition enhanced the framework by providing detailed guidance and management practices for implementing the control objectives outlined in COBIT.
Paul has been asked to complete a SWOT analysis for his solution scope. What does SWOT analysis mean?
Explanation:
SWOT analysis stands for Strengths, Weaknesses, Opportunities, and Threats. It is a strategic planning tool used to identify and evaluate the internal strengths and weaknesses of a project, product, or organization, as well as the external opportunities and threats in the environment. This analysis helps in understanding the current position and situation, assessing potential risks and advantages, and formulating strategies to leverage strengths and opportunities while mitigating weaknesses and threats.
An enterprise's board of directors can BEST manage enterprise risk by:
Explanation:
Establishing an enterprise risk management (ERM) framework enables the board of directors to systematically identify, assess, manage, and monitor risks across the organization. This approach helps in aligning risk management practices with strategic objectives and ensures comprehensive oversight of risks affecting the enterprise.
An organization supports both programs and projects for various industries. What is a portfolio?
Explanation:
In the context of project management and organizational management, a portfolio refers to a collection or grouping of related projects, programs, and operations that are managed as a group to achieve strategic objectives. A portfolio allows organizations to manage resources, risks, and priorities across a set of projects and programs to maximize benefits and achieve organizational goals.
Which of the following examples are included in the general controls embedded in IT processes and services? Each correct answer represents a complete solution.
Please select 2 correct answers
Explanation:
General controls embedded in IT processes and services typically include:
- Change management: This involves processes and procedures for managing changes to IT systems, applications, and infrastructure. Change management ensures that changes are documented, assessed for impact, tested, and implemented in a controlled manner to maintain the integrity and reliability of IT services.
- Systems development: This encompasses the processes and methodologies used for developing, maintaining, and enhancing IT systems and applications. It includes activities such as requirements gathering, design, coding, testing, deployment, and maintenance of software systems.
Which of the following is a process that occurs due to mergers, outsourcing, or changing business needs?
Explanation:
Involuntary exit refers to the process where employees are terminated or laid off from their jobs due to reasons such as mergers, outsourcing, or changing business needs. This happens when the organization needs to reduce its workforce or restructure due to strategic changes, financial pressures, or shifts in business priorities. Involuntary exits are typically initiated by the employer rather than the employee, distinguishing them from voluntary exits where employees choose to leave on their own accord.
In which of the following types of biases does the data collection itself interfere with the process it is measuring?
Explanation:
Interaction bias occurs when the process of data collection itself interferes with the process being measured. This interference can occur due to various factors, such as the presence of the data collectors influencing the behavior of the subjects or the environment, changes in conditions caused by the data collection process, or the data collection methods altering the natural state of the phenomenon being observed.
Which of the following should be the PRIMARY consideration for an enterprise when prioritizing IT projects?
Explanation:
This choice emphasizes the importance of aligning IT projects with business objectives and ensuring that the expected outcomes contribute significantly to business goals and priorities. While all options are relevant factors in project prioritization, the impact on the business is typically the most critical factor as it directly ties project investments to business value and strategic objectives.
Which of the following resource categories includes skill sets, certifications, productivity, and morale?
Explanation:
The resource category that includes skill sets, certifications, productivity, and morale is "People." This category refers to the human resources within an organization, including their skills, qualifications, certifications, productivity levels, and morale. Effective management and development of people are crucial for achieving organizational objectives and maintaining competitive advantage.
Which of the following is the BEST outcome measure to determine the effectiveness of IT risk management processes?
Explanation:
This measure is crucial because it assesses the efficiency and effectiveness of the IT risk management process in addressing identified risks promptly. A shorter time lag indicates that risks are being promptly identified, assessed, and responded to, minimizing potential negative impacts on the organization. It reflects how well the organization can detect and react to risks before they escalate into issues that could affect business operations.