IT Governance and Strategy Flashcards
7 cards from real CISA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 IT Governance and Strategy flashcards as text
Which framework is MOST commonly used by organizations to align IT governance with corporate governance objectives?
Answer: COBIT
COBIT (Control Objectives for Information and Related Technologies) is the primary framework used to align IT governance with enterprise governance goals.
An IT steering committee's PRIMARY responsibility is to:
Answer: Approve the IT budget and resolve resource conflicts between business units
The IT steering committee's primary role is to prioritize IT investments, approve budgets, and resolve conflicts over shared IT resources across business units.
When auditing IT governance, a CISA should FIRST review:
Answer: IT policies and the organizational IT governance structure
Reviewing IT policies and governance structure provides the auditor a baseline to assess whether IT governance is properly designed before testing controls.
A balanced scorecard used in IT governance typically measures performance across how many perspectives?
Answer: Four
The balanced scorecard measures performance across four perspectives: financial, customer, internal processes, and learning and growth.
Which role is PRIMARILY accountable for ensuring IT risks are managed within acceptable tolerance levels?
Answer: Board of Directors
The Board of Directors holds ultimate accountability for setting risk appetite and ensuring IT risks are managed within acceptable tolerance at the enterprise level.
An organization implements an IT governance framework but employees are unaware of their roles. This MOST likely indicates a failure in:
Answer: Communication and awareness
Effective IT governance requires that roles, responsibilities, and policies be communicated to all relevant stakeholders to ensure compliance.
The concept of 'IT value delivery' in governance PRIMARILY focuses on:
Answer: Ensuring IT investments deliver business benefits on time and within budget
IT value delivery ensures that IT investments and projects realize the expected business benefits, on schedule and within approved budgets.