From an IT governance perspective, which of the following would be the MOST significant impact of moving all IT applications to an external Software as a Service (SaaS) cloud provider?
Correct Answer: B
Question 437
Which of the following is the BEST way to encourage employees to raise ethics concerns in full confidence?
Correct Answer: C
A whistle-blower policy is a document that defines how ethics violations should be reported and how the whistle-blowers should be protected from retaliation. A whistle-blower policy is the best way to encourage employees to raise ethics concerns in full confidence, as it provides them with a clear, safe, and confidential channel to voice their concerns and seek resolution. A whistle-blower policy also demonstrates the organization's commitment to ethical conduct and accountability, and fosters a culture of trust and openness12. The other options are not as effective as establishing and communicating a whistle-blower policy. Publishing and enforcing a code of conduct policy is important for defining the ethical standards and expectations for the organization, but it does not necessarily encourage employees to raise ethics concerns, unless it is accompanied by a whistle-blower policy that ensures their protection and support3. Providing access to legal resource benefits is helpful for employees who need legal advice or assistance, but it does not guarantee their confidence or safety in reporting ethics violations, especially if they fear retaliation from their employer or co-workers4. Providing protection language in employment contracts is useful for safeguarding the rights and interests of employees, but it may not be sufficient or specific enough to address the issues and challenges faced by whistle-blowers, such as harassment, discrimination, or termination5. References: 1: Here's What You Need in Your Whistleblower Policy (and Why) - Case IQ4 2: Whistle Blowing in the Public Sector - Markkula Center for Applied Ethics3 3: Ethics Policies vs. Whistleblower Policies - What's the Difference? - CMS1 4: Legal Resources | Employee Benefits | The Hartford 5: Whistleblower Protection: Overview of Federal Laws | Congressional Research Service
Question 438
A multinational enterprise recently purchased a large company located in a different country. When introducing the concept of governance to the new acquisition, it is MOST important that executive management recognize:
Correct Answer: C
Question 439
Which of the following BEST enables an enterprise to determine whether a current program for IT infrastructure migration to the cloud is continuing to provide benefits?
Correct Answer: A
Key performance indicators (KPIs) are metrics that measure the performance of a project, program, or investment against a set of targets, objectives, or benchmarks. KPIs can help an enterprise to determine whether a current program for IT infrastructure migration to the cloud is continuing to provide benefits by tracking the progress, efficiency, quality, and outcomes of the program. KPIs can also help to identify any gaps, issues, or risks that may affect the program's success and enable timely corrective actions12. Total cost of ownership (TCO) is the purchase price of an asset plus the costs of operation over its life span. TCO can help an enterprise to compare the costs and benefits of different IT infrastructure options, such as cloud versus on-premise, but it does not measure the ongoing performance or benefits of a chosen option3. Key risk indicators (KRIs) are metrics that monitor and predict potential risks that may negatively impact an enterprise's objectives or operations. KRIs can help an enterprise to identify and mitigate any risks associated with IT infrastructure migration to the cloud, such as security breaches, data loss, or service disruptions, but they do not measure the benefits or value of the program45. Net present value (NPV) is the difference between the present value of cash inflows and the present value of cash outflows over a period of time. NPV is used to evaluate the profitability or return on investment of a project or investment by discounting the future cash flows to their present value. NPV can help an enterprise to decide whether to undertake an IT infrastructure migration to the cloud based on its expected net value, but it does not measure the actual performance or benefits of the program16. References := 3: Total Cost of Ownership: How It's Calculated With Example - Investopedia 4: Key Risk Indicators (KRIs) - National Treasury 2: How to Develop Key Risk Indicators (KRIs) to Fortify Your Business | AuditBoard 5: How to Develop Effective Key Risk Indicators - Secureframe 1: Net Present Value (NPV) - Definition, Examples, How to Do NPV Analysis 6: NPV Formula - Learn How Net Present Value Really Works, Examples
Question 440
Which of the following statements explains the difference between the IT strategy committee and the IT steering committee?
