[Oct 05, 2025] Latest CGEIT Exam with Accurate Certified in the Governance of Enterprise IT Exam PDF Questions
Practice To CGEIT - Dumpexams Remarkable Practice On your Certified in the Governance of Enterprise IT Exam Exam
The CGEIT certification is designed for professionals who have a minimum of five years of experience in IT governance-related activities, with at least one year of experience specifically related to the CGEIT domains. The CGEIT certification is a globally recognized certification that demonstrates an individual's commitment to IT governance and their ability to manage, govern, and assess IT systems to support the achievement of organizational goals.
ISACA CGEIT (Certified in the Governance of Enterprise IT) exam is a certification program designed for professionals who are responsible for managing, advising, or assuring IT governance in large enterprises. Certified in the Governance of Enterprise IT Exam certification is highly respected in the industry and is recognized globally as a symbol of excellence in IT governance.
NEW QUESTION # 61
A business is considering a policy to anonymize personal data in enterprise systems. Before making a decision, which of the following is MOST important for the IT steering committee to consider?
- A. Sustainability costs to the enterprise
- B. Potential implementation barriers
- C. Regulatory requirements
- D. Business impact analysis (BIA) results
Answer: C
Explanation:
The MOST important thing for the IT steering committee to consider before deciding on a policy to anonymize personal data in enterprise systems is the regulatory requirements. Anonymization is the process of protecting private or sensitive information by erasing or encrypting identifiers that connect an individual to stored data1. However, different jurisdictions may have different definitions, standards, and rules for anonymization and data protection2. For example, the EU's General Data Protection Regulation (GDPR) outlines a specific set of rules that protect user data and create transparency1. The GDPR permits companies to collect anonymized data without consent, use it for any purpose, and store it for an indefinite time-as long as companies remove all identifiers from the data1. However, if the data is not fully anonymized and can be re-identified by using de-anonymization methods, then the GDPR still applies and requires consent, purpose limitation, and data minimization2. Therefore, the IT steering committee should consider the regulatory requirements of the applicable legislation in both the home and host countries before deciding on a policy to anonymize personal data in enterprise systems. This can help to ensure compliance, avoid fines or penalties, and protect the reputation and trust of the business.
NEW QUESTION # 62
Which of the following would BEST enable business innovation through IT?
- A. IT participation in business strategy development
- B. Business participation in IT strategy development
- C. Adoption of a standardized business development life cycle
- D. Outsourcing of IT to a strategic business partner
Answer: A
Explanation:
Business innovation is the process of creating new or improved products, services, processes, or business models that create value for the organization and its customers. IT can enable business innovation by providing the tools, platforms, data, and capabilities that support the generation, implementation, and diffusion of innovative ideas. However, IT alone cannot drive business innovation; it requires a close collaboration and alignment between IT and business. Therefore, IT participation in business strategy development is the best way to enable business innovation through IT, because it can help to ensure that IT understands the business goals and needs, that IT contributes to the identification and evaluation of opportunities and challenges, that IT provides feasible and effective solutions and recommendations, and that IT supports the execution and monitoring of the innovation initiatives123. : How to Drive Business Innovation Through IT. How to Enable Business Innovation with IT. Business Innovation: What It Is and How to Achieve It.
NEW QUESTION # 63
Which of the following is the PRIMARY purpose of information governance?
- A. To set direction for information management capabilities through prioritization and decision making
- B. To ensure regulatory compliance is maintained while optimizing the utilization of information
- C. To monitor the processes that deliver and enhance the value of information assets
- D. To develop control procedures that help ensure information is adequately protected throughout its life cycle
Answer: A
Explanation:
The PRIMARY purpose of information governance is to set direction for information management capabilities through prioritization and decision making. Information governance is the overall strategy for information at an organization. It balances the risk that information presents with the value that information provides1. Information governance helps with legal compliance, operational transparency, and reducing expenditures associated with legal discovery1. To achieve this, information governance requires setting direction for information management capabilities through prioritization and decision making. This involves defining and implementing policies and processes for the effective and efficient acquisition, storage, distribution, usage, and disposal of information in alignment with business objectives and regulatory requirements2. It also involves ensuring the protection of information quality, integrity, availability, confidentiality, and ownership2. By setting direction for information management capabilities through prioritization and decision making, information governance can help to optimize the value and minimize the risk of information assets. Reference:= Information governance - Wikipedia1 What is Information Governance? Why is it Important?3
NEW QUESTION # 64
Which of the following IT governance practices would BEST support IT and enterprise strategic alignment?
- A. External consultants regularly review the IT portfolio
- B. IT service level agreements (SLAs) are periodically updated
- C. Senior management regularly reviews the IT portfolio
- D. An IT communication plan is continuously updated
Answer: C
Explanation:
Senior management regularly reviewing the IT portfolio is the best IT governance practice to support IT and enterprise strategic alignment, because it helps to ensure that the IT investments are aligned with the business strategy and goals, and that they deliver value to the enterprise. An IT portfolio is a collection of IT projects, programs, services, and assets that support the business objectives and processes of an organization1. Senior management regularly reviewing the IT portfolio helps to prioritize, monitor, and evaluate the IT investments based on their performance, benefits, costs, and risks2. It also helps to identify and address any gaps, issues, or opportunities for improvement in the IT portfolio2. Senior management regularly reviewing the IT portfolio also helps to communicate and collaborate with the IT department and other stakeholders, and to provide guidance and direction for the IT strategy and governance2.
References := IT Portfolio Management: A Simplified Guide | Planview, IT Governance - How to align IT and business strategy?
NEW QUESTION # 65
An IT steering committee is evaluating whether a third-party supplier is delivering the correct level of service Reviewing which of the following will provide the BEST information to the committee?
- A. Service portfolio management
- B. Vendor status reports
- C. Operational cost reduction reports
- D. Key performance indicators (KPIs)
Answer: D
Explanation:
Key performance indicators (KPIs) are the best source of information for the IT steering committee to evaluate whether a third-party supplier is delivering the correct level of service, as they are metrics that measure the achievement of specific goals or objectives. KPIs can help the committee assess the quality, efficiency, effectiveness, and value of the supplier's services, as well as their alignment with the enterprise's strategy and expectations. KPIs can also help the committee identify and address any issues or gaps in the supplier's performance, as well as monitor and report on their progress and improvement.
Service portfolio management, vendor status reports, and operational cost reduction reports are also useful sources of information for the IT steering committee, but they are not as comprehensive and reliable as KPIs.
Service portfolio management is the process of managing the lifecycle of IT services, from conception to retirement. Service portfolio management can help the committee understand the scope, objectives, and benefits of the supplier's services, as well as their interdependencies and risks. Vendor status reports are documents that provide updates on the supplier's activities, deliverables, milestones, and issues. Vendor status reports can help the committee track and communicate the status of the supplier's services, as well as identify and resolve any problems or conflicts. Operational cost reduction reports are documents that show how the supplier's services have reduced or optimized the enterprise's operational costs. Operational cost reduction reports can help the committee evaluate the financial impact and return on investment (ROI) of the supplier's services.
References := Performance Measurement Metrics for IT Governance; KPIs for Corporate Governance Dashboard - BSC Designer; feature Performance Measurement Metrics for IT Governance - ISACA; Performance Measurement Metrics for IT Governance - ISACA.
NEW QUESTION # 66
Which of the following is PRIMARILY achieved through performance measurement?
- A. Transparency
- B. Benefit realization
- C. Process improvement
- D. Cost efficiency
Answer: A
Explanation:
Transparency is primarily achieved through performance measurement, as it involves providing clear, accurate, and timely information about the performance of IT processes, services, and projects to the relevant stakeholders. Performance measurement can help to increase the visibility, accountability, and trustworthiness of IT activities and outcomes, and to enable informed decision-making and feedback. The other options are not as primary, as they are more related to the results or consequences of performance measurement, rather than the purpose or intention of it. Reference: : CGEIT Review Manual (Digital Version), Chapter 3: Benefits Realization, Section 3.3: Performance Measurement and Reporting, Subsection 3.3.1: Performance Measurement and Reporting Overview, Page 112 : CGEIT Review Manual (Digital Version), Chapter 3: Benefits Realization, Section 3.3: Performance Measurement and Reporting, Subsection 3.3.2: Performance Measurement and Reporting Process, Page 113 : Performance Measurement Metrics for IT Governance1
NEW QUESTION # 67
Which of the following components of a policy BEST enables the governance of enterprise IT?
- A. Regulatory requirements
- B. Terms and definitions
- C. Disciplinary actions
- D. Roles and responsibilities
Answer: D
NEW QUESTION # 68
As part of the implementation of IT governance, the board of an enterprise should establish an IT strategy committee to:
- A. ensure IT risks inherent in the enterprise strategy implementation are managed
- B. drive IT strategy development and take responsibility for implementing the IT strategy.
- C. provide input to and ensure alignment of the enterprise and IT strategies.
- D. assume governance accountability for the business strategy on behalf of the board
Answer: C
NEW QUESTION # 69
The PRIMARY benefit of using an IT service catalog as part of the IT governance program is that it.
- A. ensures IT effectively meets future business needs,
- B. establishes enterprise performance metrics per service
- C. provides a foundation for measuring IT performance,
- D. improves the ability to allocate IT resources
Answer: C
Explanation:
An IT service catalog is a comprehensive list of all of the services an IT organization offers, such as IT support, IT operations, or IT projects. It usually includes a description of the service, its features, costs, and response and delivery times, as well as a method for requesting the service12. An IT service catalog is part of the IT governance program, which is a framework that provides a formal structure for aligning IT investments and activities with business objectives and ensuring IT effectiveness and efficiency34. The primary benefit of using an IT service catalog as part of the IT governance program is that it provides a foundation for measuring IT performance. By defining and documenting the IT services and their expected outcomes, an IT service catalog enables the IT organization to establish and monitor key performance indicators (KPIs) and service level agreements (SLAs) for each service. These metrics can help evaluate how well the IT services meet the customer needs and expectations, as well as the business goals and priorities. They can also help identify and address any gaps or issues in the IT service delivery and quality, and support continuous improvement and optimization125.
The other options are not the primary benefit of using an IT service catalog as part of the IT governance program, although they may be related or secondary benefits. Ensuring IT effectively meets future business needs, improving the ability to allocate IT resources, and establishing enterprise performance metrics per service are all desirable outcomes of using an IT service catalog, but they are not the main purpose or benefit.
They are dependent or derived from the primary benefit of providing a foundation for measuring IT performance. By measuring IT performance, the IT organization can better understand the current and future business needs, allocate IT resources more efficiently and effectively, and align enterprise performance metrics with IT service outcomes125. References:
* 4: https://www.cio.com/article/272051/governanceit-governance-definition-and-solutions.html
* 2: https://www.atlassian.com/itsm/service-request-management/service-catalog
* 5: https://www.connectwise.com/blog/managed-services/it-service-catalog
* 1: https://www.servicenow.com/products/itsm/what-is-it-service-catalog.html
* 3: https://www.gartner.com/en/information-technology/glossary/it-governance
NEW QUESTION # 70
Which of the following BEST indicates the success of an enterprise's IT governance framework after implementation?
- A. A high percentage of IT investments delivering expected benefits
- B. A high percentage of IT projects delivered on time and on budget
- C. A high percentage of business owners involved with the approval of the IT strategic plan
- D. A high percentage of IT systems complying with corporate information security standards
Answer: A
NEW QUESTION # 71
Which of the following metrics would provide senior management with the BEST indication of the success of IT investments?
- A. Number of IT investments impacted by business-related incidents
- B. Percentage of IT investments recorded in the enterprise architecture (EA)
- C. Number of IT investments tracked in the balanced scorecard
- D. Percentage of IT investments that meet expected benefits
Answer: D
Explanation:
According to the CGEIT exam guide, the success of IT investments is measured by the extent to which they deliver the expected benefits to the enterprise and its stakeholders. Therefore, the percentage of IT investments that meet expected benefits is the best metric to indicate the success of IT investments. This metric reflects the alignment of IT with business objectives and strategies, as well as the effectiveness and efficiency of IT processes and services. The other metrics are not directly related to the success of IT investments, but rather to the management and governance of IT. References: CGEIT Exam Candidate Guide, page 13. CGEIT Certification, Performance Measurement Metrics for IT Governance
NEW QUESTION # 72
An enterprise's executive team has recently released a new IT strategy and related objectives. Which of the following would be the MOST effective way for the CIO to ensure IT personnel are supporting the new strategy's objectives?
- A. Develop communication materials to promote the new IT strategy and objectives.
- B. Require IT managers to assign activities aligned to the IT objectives.
- C. Incorporate IT objectives into individual performance evaluations.
- D. Measure progress towards IT objectives and communicate the results to IT staff.
Answer: C
Explanation:
This way, the CIO can align the IT personnel's work with the new strategy's objectives, communicate the desired outcomes and behaviors, motivate and empower the IT personnel, monitor and measure their progress and achievements, and provide feedback and recognition1. Incorporating IT objectives into individual performance evaluations can also create a culture of accountability, excellence, and continuous improvement among the IT personnel, and ensure that they contribute to the value creation and delivery of IT2.
The other options are not as effective as incorporating IT objectives into individual performance evaluations, as they do not directly link the IT objectives with the IT personnel's performance and incentives. Measuring progress towards IT objectives and communicating the results to IT staff may help to inform them about the status and direction of the new strategy, but it does not ensure that they understand or follow it. Developing communication materials to promote the new IT strategy and objectives may help to raise awareness and interest among the IT staff, but it does not ensure that they adopt or support it. Requiring IT managers to assign activities aligned to the IT objectives may help to implement the new strategy at the operational level, but it does not ensure that the IT staff are engaged or committed to it.
NEW QUESTION # 73
The CIO of an enterprise learns the payroll server of a competitor has been the victim of ransomware. To help plan for the possibility of ransomed corporate data, what should be the ClO's FIRST course of action?
- A. Back up corporate data to a secure location.
- B. Request a targeted risk assessment.
- C. Develop a policy to address ransomware.
- D. Require development of key risk indicators (KRls).
Answer: B
Explanation:
The first course of action for the CIO of an enterprise to help plan for the possibility of ransomed corporate data should be to request a targeted risk assessment. This is because a targeted risk assessment can help to identify and evaluate the specific threats, vulnerabilities, and impacts of ransomware attacks on the enterprise's data and systems. A targeted risk assessment can also help to determine the likelihood and severity of ransomware incidents, as well as the appropriate controls and mitigation strategies to reduce the risk to an acceptable level.
Requiring development of key risk indicators (KRIs) is not the first course of action, as it is a monitoring tool for measuring the risk exposure and performance. KRIs are metrics that provide information on the current level and trend of risk in relation to the risk appetite and tolerance of the enterprise. KRIs can help to track and report the progress and effectiveness of the risk management activities, as well as alert the management of any potential issues or changes that may affect the risk profile. However, requiring development of KRIs does not provide a comprehensive analysis or improvement plan for ransomed corporate data.
Developing a policy to address ransomware is not the first course of action, as it is a result of conducting a targeted risk assessment. A policy to address ransomware is a document that defines the rules, guidelines, and responsibilities for preventing, detecting, responding to, and recovering from ransomware attacks. Developing a policy to address ransomware can help to communicate the expectations and requirements for ransomware protection and compliance, as well as enforce accountability and governance for ransomware incidents.
However, developing a policy to address ransomware does not provide a detailed assessment or guidance for ransomed corporate data.
Backing up corporate data to a secure location is not the first course of action, as it is an implementation step after conducting a targeted risk assessment and developing a policy to address ransomware. Backing up corporate data to a secure location can help to preserve the availability, integrity, and confidentiality of the data in case of a ransomware attack. Backing up corporate data to a secure location can also help to restore the data and resume normal operations after a ransomware attack. However, backing up corporate data to a secure location does not provide a thorough risk analysis or governance framework for ransomed corporate data.
References := Ransomware Risk Management: NISTIR 8374, 3 Risk Management Process section. Managing the Risks of Ransomware - SEI Blog, Assess Your Risk section. Ransomware Risk Management - NIST, 4 Ransomware Risk Management Profile section. NIST Releases Tips and Tactics for Dealing With Ransomware, Back Up Your Data section.
NEW QUESTION # 74
An enterprise is replacing its customer relationship management (CRM) system with a cloud-based system.
Which of the following should be done FIRST when preparing for data migration"*
- A. Establish a data quality plan
- B. Acquire data migration tools.
- C. Review the enterprise data architecture.
- D. Consult the quality assurance (QA) function.
Answer: C
Explanation:
The enterprise data architecture is the blueprint that defines how data is collected, stored, processed, integrated, and distributed within the enterprise. It also specifies the data standards, policies, rules, and models that govern the data lifecycle. Reviewing the enterprise data architecture is the first step when preparing for data migration, as it helps to identify the source and target systems, the data entities and attributes, the relationships and dependencies, the data quality and security requirements, and the potential challenges and risks of the migration. Reviewing the enterprise data architecture also helps to align the data migration with the business objectives and strategies, and to ensure that the migrated data supports the enterprise's information needs and decision making. CGEIT Exam Content Outline | ISACA1, CGEIT Review Manual (Digital Version), Data Architecture: A Primer for the Data Scientist, Data Migration: A Comprehensive Guide
NEW QUESTION # 75
An IT governance committee is defining a risk management policy for a portfolio of !T-enabled investments Which of the following should be the PRIMARY consideration when developing the policy?
- A. Risk appetite of the enterprise
- B. Risk management framework
- C. Possible investment failures
- D. Value obtained with minimum risk
Answer: A
NEW QUESTION # 76
Which of the following should be the MOST important consideration when defining an information architecture?
- A. Frequency and quantity of information updates
- B. Information to justify business cases
- C. Access to and exchange of information
- D. Incorporation of emerging technologies
Answer: C
NEW QUESTION # 77
A global financial enterprise has been experiencing a substantial number of information security incidents that have directly affected its business reputation. Which of the following should be the IT governance board's FIRST course of action?
- A. Mandate an update to the enterprise's IT security policy.
- B. Request an IT security assessment to identify the main security gaps.
- C. Require revisions to how security incidents are managed by the IT department.
- D. Execute an IT maturity assessment of the security process.
Answer: B
NEW QUESTION # 78
In which of the following situations is it acceptable to retain data beyond the stated policy?
- A. There is a high probability that the enterprise will enter into litigation.
- B. The business created an analytics model based on historical records.
- C. New data privacy regulations are expected in a few months.
- D. A core system database is going through an upgrade.
Answer: A
Explanation:
Comprehensive and Detailed Explanation:
The CGEIT Review Manual 8th Edition, in its Governance of Enterprise IT domain, addresses data retention policies and exceptions, particularly in regulated environments. Retaining data beyond policy is acceptable when legally justified, such as a high probability of litigation, where data may be required as evidence. This ensures compliance with legal obligations and avoids penalties. The manual likely references COBIT 2019's BAI09-Managed Assets, which includes data retention for legal purposes.
* Option A: Analytics model does not justify violating policy, as analytics can use anonymized data.
* Option C: Expected regulations are speculative and not a valid exception.
* Option D: Database upgrade is technical and unrelated to retention policy exceptions.
Double Verification: The answer aligns with COBIT's BAI09 and the CGEIT domain's focus on compliance.
Litigation is a standard ISACA exception for data retention.
ISACA CGEIT Review Manual 8th Edition, Domain 1: Governance of Enterprise IT (focus on data governance).
COBIT 2019, BAI09-Managed Assets.
ISACA Glossary (for definitions of data retention), available at https://www.isaca.org/resources/glossary.
NEW QUESTION # 79
The FIRST step in aligning resource management to the enterprise's IT strategic plan would be to
- A. identify outsourcing opportunities
- B. perform a gap analysis
- C. develop a responsible, accountable, consulted and informed (RACI) chart
- D. assign appropriate roles and responsibilities
Answer: B
Explanation:
The first step in aligning resource management to the enterprise's IT strategic plan would be to perform a gap analysis. A gap analysis is a process of comparing the current state and performance of the IT resources with the desired state and expectations of the IT strategic plan. IT resources include people, processes, technology, and information that support the delivery and management of IT services and solutions1. A gap analysis can help identify the strengths, weaknesses, opportunities, and threats of the IT resources, as well as the gaps, risks, and issues that need to be addressed. A gap analysis can also provide insights and recommendations for improving and aligning the IT resources with the IT strategic plan. According to 2, one of the steps in developing an IT strategic plan is to conduct a gap analysis to assess the current capabilities and resources of the IT organization and determine the gaps between the current and future states.
The other options are not the first steps in aligning resource management to the enterprise's IT strategic plan. Developing a responsible, accountable, consulted and informed (RACI) chart is a step that may be done after performing a gap analysis, as it involves defining and clarifying the roles and responsibilities of the IT stakeholders for each task or activity in the IT strategic plan3. Assigning appropriate roles and responsibilities is a step that may be done after performing a gap analysis, as it involves allocating and delegating the IT resources to the relevant tasks or activities in the IT strategic plan. Identifying outsourcing opportunities is a step that may be done after performing a gap analysis, as it involves evaluating and selecting external vendors or partners that can provide IT services or solutions that are not available or feasible internally4. Reference := 1: What are IT Resources? Definition & Examples - BMC Software13: RACI Chart: Definition & Example - Project Management34: Outsourcing: Definition & Examples - Investopedia42: How to Create an Effective IT Strategy - Smartsheet2
NEW QUESTION # 80
Which of the following would be MOST useful in developing IT strategic plans aligned with technological needs?
- A. Enterprise architecture (EA)
- B. Benchmark analysis
- C. Business impact analysis (BIA)
- D. Business case
Answer: A
Explanation:
Enterprise architecture (EA) is the most useful in developing IT strategic plans aligned with technological needs because it provides a holistic view of the current and desired state of the organization, including its business processes, information systems, data, applications, infrastructure, and security. EA helps to align the organization's vision, strategy, and goals with its IT capabilities and resources. EA also helps to identify the gaps, risks, and opportunities for improvement in the existing IT environment and to design and implement the optimal IT solutions that can support the business needs and objectives. EA can help to ensure that the IT strategic plans are consistent, coherent, and feasible12.
A business impact analysis (BIA) is a tool that helps to assess the potential impact of a disruption or change on the business objectives, processes, and functions. A BIA can help to prioritize the criticality of the IT resources and determine the acceptable level of risk and recovery time. A BIA can provide a basis for deciding how to allocate the budget, reduce the requirements, or contract external resources3. However, a BIA is not sufficient for developing IT strategic plans aligned with technological needs because it does not provide a comprehensive view of the current and future IT architecture and its alignment with the business strategy.
A business case is a document that describes the rationale and justification for initiating a project or investment. A business case can help to evaluate the costs, benefits, risks, and alternatives of different IT options and to communicate the value proposition to the stakeholders4. However, a business case is not enough for developing IT strategic plans aligned with technological needs because it does not provide a holistic view of the current and future IT architecture and its alignment with the business strategy.
A benchmark analysis is a process of comparing the performance, quality, or practices of an organization with those of its peers or competitors. A benchmark analysis can help to identify the best practices, standards, or trends in the industry and to measure the gap between the current and desired state of an organization. However, a benchmark analysis is not adequate for developing IT strategic plans aligned with technological needs because it does not provide a holistic view of the current and future IT architecture and its alignment with the business strategy.
NEW QUESTION # 81
The PRIMARY objective of IT resource planning within an enterprise should be to:
- A. determine IT outsourcing options.
- B. determine risk associated with IT resources.
- C. maximize value received from IT.
- D. finalize service level agreements (SLAs) for IT
Answer: C
Explanation:
IT resource planning is the process of identifying, allocating, and managing the IT resources needed to support the enterprise's objectives and strategies. The primary objective of IT resource planning should be to maximize the value received from IT, which means ensuring that the IT resources are aligned with the business needs, optimized for efficiency and effectiveness, and delivering the expected benefits and outcomes. IT resource planning should also consider the risks, costs, and opportunities associated with IT resources, as well as the service level agreements (SLAs) and outsourcing options that may affect the quality and availability of IT services. References: CGEIT Exam Content Outline | ISACA1, CGEIT Review Manual (Digital Version), What are the Objectives of Resource Management? | Kantata2, What Is Resource Planning:
A Comprehensive Guide3
NEW QUESTION # 82
The PRIMARY reason for an enterprise to adopt an IT governance framework is to:
- A. expedite IT investments among other competing business investments.
- B. establish IT initiatives focused on the business strategy.
- C. allow IT to optimize confidentiality, integrity, and availability of information assets.
- D. assure IT sustains and extends the enterprise strategies and objectives.
Answer: D
Explanation:
IT governance is a framework that provides a formal structure for organizations to ensure that IT investments support business objectives. The primary reason for an enterprise to adopt an IT governance framework is to assure that IT sustains and extends the enterprise strategies and objectives, by aligning IT with business needs, optimizing IT performance and value, managing IT risks and resources, and measuring IT outcomes and benefits12. References: ISACA, CGEIT Review Manual, 7th Edition, 2019, page 15. What Is IT Governance?
Definition, Practices and Frameworks. IT Governance: Definition, Frameworks, and Best Practices.
NEW QUESTION # 83
Which of the following is the BEST way for a CIO to ensure that the work of IT employees is aligned with approved IT directives?
- A. Request a progress review of IT objectives by internal audit.
- B. Have business leaders present their departments' objectives.
- C. Include relevant IT goals in individual performance objectives.
- D. Mandate technical training related to the IT objectives.
Answer: C
Explanation:
The best way for a CIO to ensure that the work of IT employees is aligned with approved IT directives is to include relevant IT goals in individual performance objectives. This means that the CIO should communicate the IT vision, mission, strategy and objectives to the IT staff and link them to their personal and professional development plans. By doing so, the CIO can motivate the IT employees to work toward the desired outcomes, monitor their progress and performance, provide feedback and recognition, and address any issues or gaps. Including relevant IT goals in individual performance objectives can also help to align the IT employees with the business needs and expectations, foster a culture of accountability and collaboration, and improve the quality and value of IT services12. := How to Align Employee Performance With Organizational Goals, The Importance And Challenges Of Employee Alignment
NEW QUESTION # 84
......
Exam Questions and Answers for CGEIT Study Guide Questions and Answers!: https://passleader.dumpexams.com/CGEIT-vce-torrent.html