IT Governance and Strategy Flashcards
7 cards from real CISA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 IT Governance and Strategy flashcards as text
Which metric BEST measures the effectiveness of IT governance in delivering business value?
Answer: Return on IT investments (ROI)
ROI on IT investments directly measures whether IT is delivering measurable business value, which is the core objective of IT governance.
In the context of IT governance, 'strategic alignment' means:
Answer: IT and business strategies are synchronized so IT supports business goals
Strategic alignment ensures that IT plans, priorities, and investments are directly linked to and supportive of the organization's overall business strategy.
During an IT governance audit, the auditor finds that the IT strategy document has not been updated in five years. This is MOST concerning because:
Answer: The document may not reflect current business objectives and technology changes
An outdated IT strategy is a red flag that IT planning may not be aligned with current business needs, regulatory changes, or the evolving technology landscape.
A 'governance gap' in IT occurs when:
Answer: There is a difference between the intended governance design and its actual implementation
A governance gap exists when the governance framework as designed does not match how governance is actually practiced within the organization.
Which of the following BEST describes the purpose of an IT governance maturity model?
Answer: To benchmark an organization's IT governance practices against defined capability levels
A maturity model allows organizations to assess and compare their governance practices against defined levels of capability, guiding improvement efforts.
Which of the following represents a KEY principle of IT governance according to ISO/IEC 38500?
Answer: Evaluate, direct, and monitor
ISO/IEC 38500 defines IT governance through three key principles: evaluate current and future IT use, direct preparation and implementation of plans, and monitor conformance and performance.
An organization's IT governance structure should be PRIMARILY designed to:
Answer: Ensure IT decisions are made at the appropriate organizational level
Effective IT governance structures ensure decisions are made by those with the appropriate authority, accountability, and knowledge at each organizational level.