GRC IT Governance and Cybersecurity 4

Question 1

A governance committee reviews an IT investment proposal. Which framework component ensures IT investments deliver value and align with business strategy?

Accepted Answer

Value delivery in COBIT

Answer

COBIT's value delivery component ensures IT investments are prioritized and managed to deliver optimal business value.

Question 2

Which cybersecurity governance concept ensures that the controls implemented are proportional to the risk they address?

Accepted Answer

Proportionality of controls

Answer

Proportionality of controls ensures resources spent on security measures are commensurate with the risk level, avoiding over- or under-investment.

Question 3

An organization must demonstrate cybersecurity compliance to a federal agency. Which US framework is most likely mandated for federal information systems?

Accepted Answer

NIST RMF (Risk Management Framework)

Answer

NIST RMF is the mandatory framework for federal agencies under FISMA to manage security and privacy risks for information systems.

Question 4

In IT governance, an organization establishes a steering committee. What is the primary role of this committee?

Accepted Answer

Prioritize IT investments and align technology strategy with business goals

Answer

An IT steering committee provides governance oversight by aligning IT strategy with business objectives and prioritizing major IT investments.

Question 5

Which cybersecurity governance document outlines acceptable and prohibited uses of organizational IT resources by employees?

Accepted Answer

Acceptable Use Policy (AUP)

Answer

An Acceptable Use Policy defines what employees may and may not do with organizational IT resources, setting behavioral expectations.

(GRC) Governance, Risk, and Compliance Certification Practice Test

(GRC) Governance, Risk, and Compliance Certification Practice Test

GRC IT Governance and Cybersecurity 4