GRC Governance Frameworks & Best Practices 2

Question 1

Which COBIT 2019 design factor primarily considers the organization's strategy for using IT — ranging from IT avoider to first mover?

Accepted Answer

IT strategy

Answer

COBIT 2019's 'IT strategy' design factor categorizes organizations on a spectrum from IT avoider (minimal IT use) to first mover (IT as competitive differentiator).

Question 2

In ISO/IEC 38500, which principle requires that IT performance be monitored against plans and policies?

Accepted Answer

Performance

Answer

ISO/IEC 38500's 'Performance' principle requires directors to ensure IT supports the organization and monitor delivery against plans.

Question 3

The ITIL 4 guiding principle 'Focus on Value' most directly aligns with which governance objective?

Accepted Answer

Linking all activities to stakeholder benefit

Answer

The 'Focus on Value' principle requires that every action and decision be traced back to value creation for stakeholders.

Question 4

Under the NIST Cybersecurity Framework 2.0, which new function was added compared to the original five?

Accepted Answer

Govern

Answer

NIST CSF 2.0 added 'Govern' as a sixth function to emphasize cybersecurity governance at the organizational level.

Question 5

A board committee responsible for overseeing financial reporting accuracy and internal audit functions is called a(n):

Accepted Answer

Audit committee

Answer

The audit committee oversees financial reporting integrity, internal controls, and the internal/external audit relationship.

(GRC) Governance, Risk, and Compliance Certification Practice Test

(GRC) Governance, Risk, and Compliance Certification Practice Test

GRC Governance Frameworks & Best Practices 2