ISACA Governance and Management of IT 2

Question 1

Which COBIT 2019 governance objective focuses on ensuring that enterprise risk appetite and tolerance are understood and communicated?

Accepted Answer

EDM03 - Ensured Risk Optimization

Answer

EDM03 ensures that risk appetite and tolerance are understood, and that residual IT risk is within enterprise limits.

Question 2

An IS auditor is reviewing IT governance at a company where the IT strategy committee meets quarterly but business unit heads rarely attend. What is the PRIMARY risk?

Accepted Answer

IT decisions may not align with business objectives

Answer

Without business unit participation, IT decisions risk misalignment with actual business needs and strategy.

Question 3

Which metric BEST measures the effectiveness of IT governance in delivering business value?

Accepted Answer

Percentage of IT investments achieving expected business outcomes

Answer

Governance effectiveness is best measured by whether IT investments actually realize the business outcomes they were intended to deliver.

Question 4

Under ITIL 4, the concept that all IT services should be co-created with customers and stakeholders is called:

Accepted Answer

Value co-creation

Answer

ITIL 4's service value system is built on the principle of value co-creation between the service provider and its stakeholders.

Question 5

A company's board has delegated IT governance oversight to a subcommittee. An IS auditor should verify PRIMARILY that the subcommittee:

Accepted Answer

Reports its findings and decisions to the full board

Answer

Delegating oversight does not transfer accountability; the subcommittee must report to the full board so ultimate accountability remains intact.

(ISACA) Information Systems Audit and Control Association Certification Practice Test

(ISACA) Information Systems Audit and Control Association Certification Practice Test

ISACA Governance and Management of IT 2