

[May 03, 2023] CGEIT Exam Dumps - Try Best CGEIT Exam Questions - Exam4Docs
Verified CGEIT exam dumps Q&As with Correct 409 Questions and Answers
ISACA Governance of Enterprise IT Exam Syllabus Topics:
| Topic | Details | Weights |
|---|
| Framework for the Governance of Enterprise IT | - Ensure the definition, establishment, and management of a framework for the governance of enterprise IT in alignment with the mission, vision and values of the enterprise. Task Statements - Ensure that a framework for the governance of enterprise IT is established and enables the achievement of enterprise goals and objectives to create stakeholder value, taking into account benefits realization, risk optimization, and resource optimization.
- Identify the requirements and objectives for the framework for the governance of enterprise IT incorporating input from enablers such as principles, policies and frameworks; processes; organizational structures; culture, ethics and behavior; information; services, infrastructure and applications; people, skills and competencies.
- Ensure that the framework for the governance of enterprise IT addresses applicable internal and external requirements (for example, principles, policies and standards, laws, regulations, service capabilities and contracts).
- Ensure that strategic planning processes are incorporated into the framework for the governance of enterprise IT.
- Ensure the incorporation of enterprise architecture (EA) into the framework for the governance of enterprise IT in order to optimize IT-enabled business solutions.
- Ensure that the framework for the governance of enterprise IT incorporates comprehensive and repeatable processes and activities.
- Ensure that the roles, responsibilities and accountabilities for information systems and IT processes are established.
- Ensure issues related to the framework for the governance of enterprise IT are reviewed, monitored, reported and remediated.
- Ensure that organizational structures are in place to enable effective planning and implementation of IT-enabled business investments.
- Ensure the establishment of a communication channel to reinforce the value of the governance of enterprise IT and transparency of IT costs, benefits and risk throughout the enterprise.
- Ensure that the framework for the governance of enterprise IT is periodically assessed, including the identification of improvement opportunities.
Knowledge Statements - Knowledge of components of a framework for the governance of enterprise IT.
- Knowledge of IT governance industry practices, standards and frameworks (for example, COBIT, Information Technology Infrastructure Library [ITIL], International Organization for Standardization [ISO] 20000, ISO 38500).
- Knowledge of business drivers related to IT governance (for example, legal, regulatory and contractual requirements).
- Knowledge of IT governance enablers (for example, principles, policies and frameworks; processes; organizational structures; culture, ethics and behavior; information; services, infrastructure and applications; people, skills and competencies).
- Knowledge of techniques used to identify IT strategy (for example, SWOT, BCG Matrix).
- Knowledge of components, principles, and concepts related to enterprise architecture (EA).
- Knowledge of Organizational structures and their roles and responsibilities (for example, enterprise investment committee, program management office, IT strategy committee, IT architecture review board, IT risk management committee).
- Knowledge of methods to manage organizational, process and cultural change.
- Knowledge of models and methods to establish accountability for information requirements, data and system ownership; and IT processes.
- Knowledge of IT governance monitoring processes/mechanisms (for example, balanced scorecard (BSC).
- Knowledge of IT governance reporting processes/mechanisms.
- Knowledge of communication and promotion techniques.
- Knowledge of assurance methodologies and techniques.
- Knowledge of continuous improvement techniques and processes.
| 25% |
| Benefits Realization | - Ensure that IT-enabled investments are managed to deliver optimized business benefits and that benefit realization outcome and performance measures are established, evaluated and progress is reported to key stakeholders. Task Statements - Ensure that IT-enabled investments are managed as a portfolio of investments.
- Ensure that IT-enabled investments are managed through their economic life cycle to achieve business benefit.
- Ensure business ownership and accountability for IT-enabled investments are established.
- Ensure that IT investment management practices align with enterprise investment management practices.
- Ensure that IT-enabled investment portfolios, IT processes and IT services are evaluated and benchmarked to achieve business benefit.
- Ensure that outcome and performance measures are established and evaluated to assess progress towards the achievement of enterprise and IT objectives.
- Ensure that outcome and performance measures are monitored and reported to key stakeholders in a timely manner.
- Ensure that improvement initiatives are identified, prioritized, initiated and managed based on outcome and performance measures.
Knowledge Statements - Knowledge of IT investment management processes, including the economic life cycle of investments.
- Knowledge of basic principles of portfolio management.
- Knowledge of benefit calculation techniques (for example, earned value, total cost of ownership, return on investment).
- Knowledge of process and service measurement techniques (for example, maturity models, benchmarking, key performance indicators [KPIs]).
- Knowledge of processes and practices for planning, development, transition, delivery, and support of IT solutions and services.
- Knowledge of continuous improvement concepts and principles.
- Knowledge of outcome and performance measurement techniques (for example, service metrics, key performance indicators [KPIs]).
- Knowledge of procedures to manage and report the status of IT investments.
- Knowledge of cost optimization strategies (for example, outsourcing, adoption of new technologies).
- Knowledge of models and methods to establish accountability over IT investments.
- Knowledge of value delivery frameworks (for example, Val IT).
- Knowledge of business case development and evaluation techniques.
| 16% |
| Resource Optimization | - Ensure the optimization of IT resources including information, services, infrastructure and applications, and people, to support the achievement of enterprise objectives. Task Statements - Ensure that processes are in place to identify, acquire and maintain IT resources and capabilities (i.e., information, services, infrastructure and applications, and people).
- Evaluate, direct and monitor sourcing strategies to ensure existing resources are taken into account to optimize IT resource utilization.
- Ensure the integration of IT resource management into the enterprise’s strategic and tactical planning.
- Ensure the alignment of IT resource management processes with the enterprise’s resource management processes.
- Ensure that a resource gap analysis process is in place so that IT is able to meet strategic objectives of the enterprise.
- Ensure that policies exist to guide IT resource sourcing strategies that include service level agreements (SLAs) and changes to sourcing strategies.
- Ensure that policies and processes are in place for the assessment, training and development of staff to address enterprise requirements and personal/professional growth.
Knowledge Statements - Knowledge of IT resource planning methods.
- Knowledge of human resource procurement, assessment, training, and development methodologies.
- Knowledge of processes for acquiring application, information, and infrastructure resources.
- Knowledge of outsourcing and offshoring approaches that may be employed to meet the investment program and operation level agreements (OLAs) and service level agreements (SLAs).
- Knowledge of methods used to record and monitor IT resource utilization and availability.
- Knowledge of methods used to evaluate and report on IT resource performance.
- Knowledge of interoperability, standardization and economies of scale.
- Knowledge of data management and data governance concepts.
- Knowledge of service level management concepts.
| 15% |
| Strategic Management | - Ensure that IT enables and supports the achievement of enterprise objectives through the integration and alignment of IT strategic plans with enterprise strategic plans. Task Statements - Evaluate, direct and monitor IT strategic planning processes to ensure alignment with enterprise goals.
- Ensure that appropriate policies and procedures are in place to support IT and enterprise strategic alignment.
- Ensure that the IT strategic planning processes and related outputs are adequately documented and communicated.
- Ensure that enterprise architecture (EA) is integrated into the IT strategic planning process.
- Ensure prioritization of IT initiatives to achieve enterprise objectives.
- Ensure that IT objectives cascade into clear roles, responsibilities and actions of IT personnel.
Knowledge Statements - Knowledge of an enterprise’s strategic plan and how it relates to IT.
- Knowledge of strategic planning processes and techniques.
- Knowledge of impact of changes in business strategy on IT strategy.
- Knowledge of barriers to the achievement of strategic alignment.
- Knowledge of policies and procedures necessary to support IT and business strategic alignment.
- Knowledge of methods to document and communicate IT strategic planning processes (for example, IT dashboard/balanced scorecard, key indicators).
- Knowledge of components, principles and frameworks of enterprise architecture (EA).
- Knowledge of current and future technologies.
- Knowledge of prioritization processes related to IT initiatives.
- Knowledge of scope, objectives and benefits of IT investment programs.
- Knowledge of IT roles and responsibilities and methods to cascade business and IT objectives to IT personnel.
| 20% |
NEW QUESTION 96
Which of the following examples are included in the application controls embedded in business process applications? Each correct answer represents a complete solution.
Choose all that apply.
- A. Computer operations
- B. Segregation of duties
- C. Security
- D. Validity
Answer: B,D
NEW QUESTION 97
An internal audit revealed a widespread perception that the enterprise's IT governance reporting lacks transparency Which of the following should the CIO do FIRST?
- A. Develop a communication and awareness strategy
- B. Add stakeholder transparency metrics to the balanced scorecard
- C. Adopt an industry-recognized template to standardize reports.
- D. Meet with key stakeholders to understand their concerns
Answer: D
NEW QUESTION 98
An enterprise embarked on an aggressive strategy requiring the implementation of several large IT projects impacting multiple business processes across all departments. Initially employees were supportive of the strategy, but there is growing fatigue and frustration with the ongoing new capabilities which must be learned. Which of the following would be the BEST action performed by senior management?
- A. Assess current business and IT competencies.
- B. Incorporate an organizational change management program.
- C. Improve the system development life cycle (SDLC) process.
- D. Establish "Reward and Recognition" efforts to boost employee morale.
Answer: D
NEW QUESTION 99
Which of the following is the BEST approach to assist an enterprise in planning for iT-enabled investments'?
- A. Enterprise architecture (EA).
- B. Service level management
- C. IT process mapping
- D. Task management
Answer: A
NEW QUESTION 100
Which of the following outsourcing defines the performance objectives reached by negotiation between the user and the provider of a service, or between an outsourcer and an organization?
- A. Outsource
- B. Contract
- C. Proposal
- D. Service level Agreement (SLA)
Answer: D
NEW QUESTION 101
Which of the following processes is responsible for controlling, recording and reporting on versions, attributes, and relationships relating to components of the Information Technology (IT) infrastructure?
- A. ICT Operations Management
- B. Service Catalogue Management
- C. Service Asset and Configuration Management
- D. Service Level Management
Answer: C
Explanation:
Section: Volume B
NEW QUESTION 102
Which of the following sub-processes of Capacity Management is concerned with the management of the individual components of the IT Infrastructure?
- A. Service Capacity Management
- B. Resource Capacity Management
- C. Business Capacity Management
- D. Capacity Management Reporting
Answer: B
NEW QUESTION 103
Which of the following domains of COBIT covers areas such as the execution of the applications within the IT system and its results as well as the support processes that enable the effective and efficient execution of these IT systems?
- A. Monitor and Evaluate
- B. Deliver and Support
- C. Acquire and Implement
- D. Plan and Organize
Answer: B
NEW QUESTION 104
An enterprise's chief information officer (CIO) has been receiving complaints from business executives regarding the amount their units are being charged for IT services. To maintain a good relationship with business peers, the CIO wants to be responsive to these complaints. To address this issue, the FIRST step should be to:
- A. agree to reduce charge rates and improve relationship management with the business.
- B. ask the chief financial officer (CFO) about budget revisions for the business units' IT expenditures.
- C. quantify consumption and service level agreement (SLA) achievements per business unit.
- D. look into outsourcing of support functions to drive down the cost structure.
Answer: C
NEW QUESTION 105
Management has asked you to perform a risk audit and report back on the results.
Bonny, a project team member asks you what a risk audit is. What do you tell Bonny?
- A. A risk audit is a review of the effectiveness of the risk responses in dealing with identified risks and their root causes, as well as the effectiveness of the risk management process.
- B. A risk audit is an audit of all the risks that have occurred in the project and what their true impact on cost and time has been.
- C. A risk audit is a review of all the risk probability and impact for the risks, which are still present in the project but which have not yet occurred.
- D. A risk audit is a review of all the risks that have yet to occur and what their probability of happening are.
Answer: A
NEW QUESTION 106
Marsha is the project manager of the NHQ Project. There's a risk that her project team has identified, which could cause the project to be late by more than a month. Marsha does not want this risk event to happen so she devises extra project activities to ensure that the risk event will not happen. The extra steps, however, will cost the project an additional $10,000. What type of risk response is this approach?
- A. Exploiting
- B. Enhancing
- C. Mitigation
- D. Transference
Answer: C
NEW QUESTION 107
Which of the following responsibilities are performed by the core team of IT governance? Each correct answer represents a complete solution. Choose all that apply.
- A. Provide service feedback to providers.
- B. Report on process.
- C. Undertake core tasks.
- D. Define plan and deliverables.
Answer: B,C,D
NEW QUESTION 108
Which of the following best describes the identification, analysis, and ranking of risks?
- A. Fast tracking
- B. Fixed-price contracts
- C. Design of experiments
- D. Plan Risk management
Answer: D
NEW QUESTION 109
An IT audit reveals inconsistent maintenance of data privacy in enterprise systems primarily due to a lack of data sensitivity categorizations. Once the categorizations are defined, what is the BEST long-term strategic response by IT governance to address this problem?
- A. Reassess the data governance policy.
- B. Incorporate enterprise privacy categorizations into contracts.
- C. Require business impact analyses (BIAs) for enterprise systems.
- D. Standardize data classification processes throughout the enterprise.
Answer: D
NEW QUESTION 110
Which of the following is PRIMARILY achieved through performance measurement?
- A. Process improvement
- B. Cost efficiency
- C. Transparency
- D. Benefit realization
Answer: A
NEW QUESTION 111
The entry points to Service Strategy are referred to as "the Four Ps". They identify the different forms a service strategy may take. Which of the following is a correct list of the 'Four Ps'?
- A. Potential, Preparation, Performance, and Profit
- B. People, Potential, Products, and Performance
- C. People, Products, Partners, and Profit
- D. Perspective, Position, Plan, and Pattern
Answer: D
NEW QUESTION 112
......
For more info visit:
Isaca CGEIT Exam Reference
ISACA CGEIT Test Engine PDF - All Free Dumps: https://www.exam4docs.com/CGEIT-study-questions.html
Get New CGEIT Certification – Valid Exam Dumps Questions: https://drive.google.com/open?id=1w5kM_OBTDvrDUFYZhVZGJW-jlkMTX_Us