CGEIT Exam Dumps - Certified in the Governance of Enterprise IT Exam

According to the CGEIT exam guide, the IT strategy committee should ensure that the IT strategic plan is aligned with the business needs and goals of the enterprise. Therefore, before initiating the development of an IT strategic plan, the committee members should be apprised of the business needs and understand the expectations and requirements of the stakeholders. References: CGEIT Exam Candidate Guide, page 13. CGEIT Certification

A balanced scorecard is a tool that would best demonstrate the current state of strategic alignment, because it is a framework that translates the enterprise’s vision and strategy into a set of performance measures that cover four perspectives: financial, customer, internal business process, and learning and growth12. A balanced scorecard can help to assess how well the IT function is supporting the business objectives, and identify the gaps and opportunities for improvement. A balanced scorecard can also help to communicate and monitor the IT strategy and goals, and align the IT activities and resources with the business needs and expectations1 .

The CIO should first establish a business case for the BYOD program, because a business case is a document that outlines the rationale, objectives, benefits, costs, risks, and feasibility of a proposed project or initiative1. A business case can help the CIO to justify the need and value of the BYOD program to the senior management and stakeholders, and to secure the necessary funding and resources for its implementation. A business case can also help the CIO to define the scope, requirements, and success criteria of the BYOD program, and to align it with the enterprise’s strategy, goals, and governance framework2. According to ISACA’s CGEIT Domain 2: IT Resources3, “the enterprise should have a clear business case for each IT investment decision that includes expected benefits, costs, risks and alignment with strategic objectives.” Furthermore, according to ISACA’s article on BYOD, “a business case is essential for any BYOD initiative as it helps to determine whether the benefits outweigh the costs and risks.” Therefore, establishing a business case is the best first step for the CIO who is considering introducing a BYOD program.

 The requirements for security and privacy of information should be defined when issuing RFPs to ensure that potential vendors can meet the enterprise’s expectations and comply with relevant regulations. This will also help the enterprise to evaluate and compare the proposals based on the predefined criteria. References: CGEIT Review Manual (Digital Version) or CGEIT Review Manual (Print Version), Chapter 3: Benefits Realization, Section 3.2: IT Investment Management, Subsection 3.2.2: IT Investment Selection, Page 97-98.

Data stewards are primarily responsible for applying frameworks for the governance of IT to balance the need for security controls with business requirements, as they are the custodians of the data quality, integrity, and security within an organization. Data stewards define and implement data policies, standards, and procedures, as well as monitor and report on data compliance and performance. Data stewards also collaborate with other stakeholders, such as data owners, data users, and data scientists, to ensure that the data is aligned with the business objectives and meets the regulatory and ethical requirements.

Data scientists, data analysts, and data processors are not primarily responsible for applying frameworks for the governance of IT, as they are more focused on the technical aspects of data collection, analysis, and processing. Data scientists use advanced methods and tools to extract insights and value from data. Data analysts use descriptive and inferential statistics to explore and interpret data. Data processors perform operations on data, such as entry, validation, transformation, storage, and retrieval.

References := What is a Data Steward? | Informatica; Data Governance Roles: The Ultimate Guide | Collibra; Data Governance Roles: Who Does What? | erwin; [What is IT governance? A formal way to align IT & business strategy].

The best way for an IT steering committee to monitor the adoption of a new enterprise IT strategy is to establish key performance indicators (KPIs), because they are metrics that measure the progress and achievement of the IT strategic objectives and goals, and provide feedback and guidance for improvement. KPIs can help the IT steering committee to track and evaluate the performance and outcomes of the IT function, and to ensure that the IT activities and resources are aligned with the business needs and expectations12. KPIs can also help to communicate and report the IT value delivery and innovation to the board and other stakeholders12. References := ISACA, CGEIT Review Manual, 7th Edition, 2019, page 43-44.

Portfolio management is the process of selecting, prioritizing, monitoring and controlling the projects, programs and other related work that best align with the enterprise’s strategic objectives and deliver the most value to the stakeholders. The primary strategic goal of implementing portfolio management is to maximize value from the combined investments by ensuring that they are aligned with the enterprise’s vision, mission, goals and values, and that they are optimized in terms of risk, return and resource allocation. References: CGEIT Domain 2: IT Resources

Internal audit is an independent and objective function that provides assurance and consulting services to the enterprise on the effectiveness and efficiency of its governance, risk management,and control processes1. By including internal audit as a stakeholder, the enterprise can benefit from its knowledge, expertise, and perspective on IT-related issues and risks, such as IT strategy alignment, IT performance measurement, IT value delivery, IT resource management, IT risk management, and IT compliance2. Internal audit can also provide input on the design, implementation, and evaluation of the IT governance framework, policies, standards, and procedures, as well as recommend improvements and best practices2. Therefore, internal audit provides input on relevant issues and control processes, which is the most important reason to include it as a stakeholder when establishing clear roles for the governance of IT.

The other options are not as important or accurate as option D. Internal audit does not have knowledge and technical expertise to advise on IT infrastructure, as this is not its primary role or responsibility. Internal audit is not accountable for the overall enterprise governance of IT, as this is the responsibility of the board of directors and senior management3. Internal audit does not implement controls over IT risks and security, as this is the responsibility of the IT function and other business units4.