To generate value for the enterprise, it is MOST important that IT investments are:

A. consistent with the enterprise's business objectives.
B. approved by the CFO.
C. aligned with the IT strategic objectives.
D. included in the balanced scorecard.

Which of the following should be the MOST important consideration for a hospital planning to use cloud services and mobile applications?

A. Acceptable use policy
B. Internet connectivity
C. Data classification
D. Privacy requirements

In a large enterprise, which of the following is the MOST effective way to understand the business activities associated with the enterprise's information architecture?

A. Aligning business objectives to organizational strategy
B. Reviewing IT design with business process managers
C. Reviewing business strategy with senior management
D. Mapping business processes within a framework

Which of the following is the MOST important characteristic of a well-defined information architecture?

A. It supports IT strategic goals.
B. It addresses key stakeholder requirements.
C. It enables achievement of service level agreements (SLAs).
D. It ensures compliance with regulations.

Which of the following would be the PRIMARY impact on IT governance when a business strategy is changed?

A. Relationship level with IT outsourcers
B. Performance outcomes of IT objectives
C. IT governance structure
D. Maturity level of IT processes

Which of the following is the PRIMARY purpose of information governance?

A. To ensure regulatory compliance is maintained while optimizing the utilization of information
B. To set direction for information management capabilities through prioritization and decision making
C. To develop control procedures that help ensure information is adequately protected throughout its life cycle
D. To monitor the processes that deliver and enhance the value of information assets

Establishing a uniform definition for likelihood and impact BEST enables an enterprise to:

A. reduce risk appetite and tolerance levels.
B. develop key risk indicators (KRIs).
C. reduce variance in the assessment of risk.
D. prioritize threat assessment.

As the required core competencies of the IT workforce are anticipated and identified, what is the NEXT step in strengthening the department's human resource assets?

A. Commit to the board performance metrics and bonus structure.
B. Create an effective recruitment, retention, and training program.
C. Develop personnel requirements for third-party assurance.
D. Develop a responsible, accountable, consulted, and informed (RACI) chart.

Which of the following is MOST important for the effective design of an IT balanced scorecard?

A. On-demand reporting and continuous monitoring
B. Consulting with the CIO
C. Emphasizing the financial results
D. Identifying appropriate key performance indicators (KPIs)

An enterprise is developing an ethics program, and the ethical standards have been defined. Which of the following should the enterprise do NEXT?

A. Outline and document consequences for noncompliance.
B. Establish a training and awareness program focused on ethics.
C. Implement an enterprise-wide employee monitoring program.
D. Develop key performance indicators (KPIs) for program implementation.