The risk committee is overwhelmed by the number of false positives included in risk reports. What action would BEST address this situation?

A. Evaluate key risk indicators.
B. Adjust IT balanced scorecard.
C. Conduct a risk assessment.
D. Change the reporting format.

A CIO has recently been made aware of a new regulatory requirement which may affect IT-enabled business activities. Which of the following should be the CIO’s FIRST step in deciding the appropriate response to the new requirement?

A. Consult with legal and risk experts to understand the requirements.
B. Confirm there are adequate resources to mitigate compliance requirements.
C. Consult with the board for guidance on the new requirement.
D. Revise initiatives that are active to reflect the new requirements.

Which of the following is the BEST way to address concerns associated with outsourcing an IT process?

A. Implement a business continuity plan.
B. Perform a risk assessment.
C. Review the IT governance framework.
D. Manage service levels.

To measure the value of IT-enabled investments, an enterprise needs to identify its drivers as defined by its:

A. value statements.
B. service level agreements (SLAs).
C. business strategy.
D. technology strategy.

Which of the following is the BEST approach to assist an enterprise in planning for IT-enabled investments?

A. Enterprise architecture
B. Service level management
C. Task management
D. IT process mapping

Which of the following would BEST help to improve an enterprise’s ability to manage large IT investment projects?

A. Reviewing and evaluating existing business cases
B. Creating a change management board
C. Publishing the IT approval process online for wider scrutiny
D. Implementing a review and approval process for each phase

For the first time, the procurement department has requested that IT grant remote access to third-party suppliers. Which of the following is the BEST course of action for IT in responding to the request?

A. Analyze risks and propose a solution.
B. Implement a remote access architecture.
C. Develop a remote access policy.
D. Issue log-on credentials to third-party suppliers.

Which of the following would be the MOST effective way to ensure IT capabilities are appropriately aligned with business requirements for specific business processes?

A. Issuing a management mandate that IT and business process stakeholders work together
B. Requiring architecture and design reviews with business process stakeholders
C. Establishing key performance indicators (KPIs)
D. Requiring internal IT architecture and design reviews

The MOST important aspect of an IT governance framework to ensure that IT supports repeatable business processes is:

A. resource management.
B. quality management.
C. risk management.
D. earned value management.

An enterprise is contracting with an outsourcing partner for a long-term engagement. The BEST time for the enterprise to plan for the event of contract termination:

A. developing the initial contract.
B. either party decides to terminate the contract.
C. issues surface in the contractual relationship.
D. planning for the contract as part of business continuity.