An enterprise's board of directors is developing a strategy change. Although the strategy is not finalized, the board recognizes the need for IT to be responsive. Which of the following is the FIRST step to prepare for this change?
Correct Answer: A
* This is because IT is a key enabler and driver of business strategy, and it needs to understand and align with the strategic vision, goals, and priorities of the enterprise1. By ensuring IT has knowledgeable representation and is included in the strategic planning process, the enterprise can: * Leverage IT's expertise and insights to identify and evaluate the opportunities and challenges of the strategy change1 * Ensure IT's readiness and capability to support and execute the strategy change1 * Avoid any gaps or misalignments between IT and business expectations and requirements1 * Foster a collaborative and supportive relationship between IT and business stakeholders1 * B. Increase the IT budget and approve an IT staff level increase to ensure resource availability for the strategy change. This is not the first step to prepare for the change in the enterprise's board of directors' strategy, as it may be premature or unnecessary to do so without a clear understanding and agreement of the scope, impact, and implications of the strategy change. Increasing the IT budget and staff level may also create inefficiencies or wastages if they are not aligned with the actual needs and priorities of the strategy change2. * C. Initiate an IT service awareness campaign to business system owners and implement service level agreements (SLAs). This is not the first step to prepare for the change in the enterprise's board of directors' strategy, as it may not be relevant or effective to do so without a clear definition and communication of the strategy change. Initiating an IT service awareness campaign and implementing SLAs are more related to the delivery and management of IT services, rather than the planning and alignment of IT strategy3. * D. Outsource both IT operations and IT development and implement controls based on a standardized framework. This is not the first step to prepare for the change in the enterprise's board of directors' strategy, as it may introduce new risks and challenges for IT governance, such as loss of control, dependency, compatibility, security, compliance, and cost issues4. Outsourcing both IT operations and development may also reduce the involvement and ownership of IT in the strategic planning process, which could affect its alignment and responsiveness to the strategy change4. Outsourcing should be carefully considered and evaluated based on the specific needs and circumstances of the enterprise, and should be complemented by a robust governance and management framework4.
Question 402
An enterprise has a zero-tolerance policy regarding security. This policy is causing a large number of email attachments to be blocked and is a disruption to the enterprise. Which of the following should be the FIRST governance step to address this email issue?
Correct Answer: B
Explanation
Question 403
A retail enterprise has cost reduction as its top priority. From a governance perspective, which of the following should be the MOST important consideration when evaluating different IT investment options?
Correct Answer: B
Question 404
Which of the following roles has PRIMARY accountability for the security related to data assets?
Correct Answer: B
The role that has primary accountability for the security related to data assets is the data owner. A data owner is a person who is generally in a senior company position, responsible for the categorization, protection, usage, and quality of one or more data sets1. The data owner must ensure that the information within their domain is correctly maintained across various platforms and business processes, and that it is secured from unauthorized access and misuse2. The data owner also has the authority to grant or revoke access rights to the data, and to define and enforce data security policies and standards3. Therefore, the data owner is the primary accountable role for the security related to data assets. : Data Owners vs. Data Stewards vs. Data Custodians - CPO Magazine2, CISSP domain 2: Asset security - Infosec Resources
Question 405
A CIO is planning to implement an enterprise resource planning (ERP) system at the request of the business. Of the following, who is accountable for providing sponsorship for the IT-enabled change across the enterprise?
Correct Answer: A
According to the web search results, the CEO is accountable for providing sponsorship for the IT-enabled change across the enterprise. The CEO is the highest-ranking executive in the organization, and has the authority and responsibility to lead the strategic direction and vision of the enterprise. The CEO also has the power and influence to allocate resources, prioritize initiatives, resolve conflicts, and communicate with stakeholders. Therefore, the CEO is the best person to provide sponsorship for the ERP implementation, which is a major and complex IT-enabled change that affects the entire enterprise12. The other options are not as accountable as the CEO for providing sponsorship for the IT-enabled change across the enterprise. The HR director is responsible for managing the human resources functions of the organization, such as recruitment, training, compensation, and performance management. The HR director may support the ERP implementation by facilitating change management, employee engagement, and organizational development, but does not have the same level of authority and accountability as the CEO3. The IT strategy committee is a group of senior executives from different business units that provide guidance and oversight for the IT strategy and governance of the organization. The IT strategy committee may advise and approve the ERP implementation, but does not have the same level of leadership and visibility as the CEO4. The CIO is responsible for managing the IT functions of the organization, such as planning, implementing, and operating the IT systems and services. The CIO may lead and execute the ERP implementation, but does not have the same level of responsibility and influence as the CEO. References: 1: What Is A Project Sponsor & Do You Need One When Implementing ERP?1 2: Building a Successful ERP Implementation Team | NetSuite2 3: What Does an HR Director Do? | Indeed.com 4: What Is an IT Strategy Committee? | Bizfluent : What is a CIO? Everything you need to know about the Chief Information Officer explained | ZDNet
