IT Project Governance Flashcards
7 cards from real CSI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 IT Project Governance flashcards as text
In IT project governance, what distinguishes a 'toll gate' from a 'phase gate'?
Answer: Toll gates are lighter-touch checkpoints within a phase, while phase gates occur between phases
Toll gates are interim governance checkpoints within a phase, providing more frequent oversight without requiring full phase completion.
A CSI project's risk register shows a critical integration risk with a HIGH likelihood and HIGH impact. Under governance best practices, who should own this risk?
Answer: A senior stakeholder or sponsor with authority to act on it
High-priority risks should be owned by someone with the authority and resources to implement response strategies effectively.
Which framework is MOST commonly referenced for IT governance at the enterprise level, covering alignment of IT with business strategy?
Answer: COBIT
COBIT (Control Objectives for Information and Related Technologies) is the leading framework for enterprise IT governance and management.
A project governance model requires 'dual sign-off' for production deployments. During an urgent integration fix, the secondary approver is unavailable. What should the project team do?
Answer: Invoke the documented exception or escalation process
Good governance frameworks include exception processes for urgent situations, ensuring controls are maintained without blocking critical work.
What is the governance implication of 'shadow IT' projects within an organization running formal system integration programs?
Answer: It creates security, compliance, and integration risks that bypass governance controls
Shadow IT bypasses security reviews, compliance checks, and architectural standards, creating hidden risks for integration projects.
During post-implementation review of a system integration project, the team discovers a governance gap that led to a missed security approval. What is the BEST response?
Answer: Document lessons learned and update governance procedures to close the gap
Post-implementation reviews should capture lessons learned that improve governance frameworks for future projects.
An organization uses a portfolio management approach to IT governance. A new CSI project is proposed. At what level is the initial go/no-go decision TYPICALLY made?
Answer: At portfolio or executive committee level before project initiation
Portfolio governance ensures strategic alignment and resource optimization before projects are approved and initiated.