When developing an IT strategic plan that supports an enterprise's business goals which of the following should be done FIRST?

• A.Analyze benchmarking data
• B.Perform a business impact analysis (BIA)
• C.Understand the current vision
• D.Ensure that IT drives business goals

Comment: *

Name: *

Email: *

Verification: *

Before an IT strategy committee can approve an IT risk assessment framework, which of the following is MOST important to have established?

• A.An enterprise risk mitigation strategy
• B.Leading and lagging risk indicators
• C.IT performance metrics and standards
• D.Enterprise definitions for risk impact and probability

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST facilitates governance oversight of data protection measures?

• A.Information ownership
• B.Information custodianship
• C.Information classification
• D.Information life cycle management

Comment: *

Name: *

Email: *

Verification: *

When establishing a risk management process which of the following should be the FIRST step?

• A.Determine the probability of occurrence
• B.Identify threats
• C.Identify assets
• D.Assess risk exposures

Comment: *

Name: *

Email: *

Verification: *

In an enterprise that has worldwide business units and a centralized financial control model, which of the following is a barrier to strategic alignment of business and IT?

• A.The enterprise's CIO is a member of the executive committee.
• B.Uniform portfolio management is in place throughout the business units.
• C.IT is the exclusive provider of IT services to the business units.
• D.Each business unit has its own steering committee for IT investment and prioritization.

Comment: *

Name: *

Email: *

Verification: *