CGEIT Exam Dumps - Certified in the Governance of Enterprise IT Exam

The most important consideration when defining an information architecture is access to and exchange of information. Information architecture (IA) is the process of guiding users through the site by organising and arranging all the relevant content in a clear, intuitive way1. The main purpose of IA is to help users find information and complete tasks2. To do this, IA needs to consider how users access and exchange information within the digital product or service, and how to make it easy, fast, and satisfying for them. Access to and exchange of information involves aspects such as:

Navigation systems: How users browse or move through information2. Navigation systems should be consistent, predictable, and visible, and should provide feedback and orientation cues to the users3.

Search systems: How users look for information2. Search systems should be accurate, relevant, and comprehensive, and should support different types of queries and filters4.

Labelling systems: How information is represented and classified2. Labelling systems should use clear, concise, and meaningful words that match the users’ expectations and vocabulary.

Information structure: How information is organised into categories, hierarchies, and relationships2. Information structure should reflect the users’ mental models and tasks, and should avoid unnecessary complexity or ambiguity.

By considering access to and exchange of information when defining an IA, the organization can ensure that the information assets are usable, findable, and accessible to the users, and that they support the user experience and the business goals. References: Information Architecture Basics | Usability.gov1, What is information architecture? - UX Design Institute2, Navigation Design Basics: Tips & Best Practices - Adobe XD Ideas3, Search System Design: Best Practices & Tips- Adobe XD Ideas4, Labeling Systems: An Introduction to Information Architecture - Boxes …, Information Architecture 101: Techniques and Best Practices - Adobe …

An IT balanced scorecard is the best information source to assess the effective alignment of IT investments, because it provides a comprehensive and balanced view of the IT performance and value from four perspectives: financial, customer, internal process, and learning and growth1. An IT balanced scorecard helps to translate the IT strategy and objectives into measurable indicators that reflect the contribution of IT to the business strategy and goals2. An IT balanced scorecard also helps to monitor and evaluate the IT investments based on their benefits, costs, and risks, and to identify and address any gaps or issues in the IT alignment2. An IT balanced scorecard also helps to communicate and report the IT value and outcomes to the stakeholders, and to foster a continuous improvement culture within the organization2.

References := Implementing the IT Balanced Scorecard: Aligning IT with … - Routledge, Strategy-Based Balanced Scorecards for Technology.

When deciding to develop a system with sensitive data, the MOST important thing to include in a business case is a risk assessment to determine the appropriate controls. A business case is a document that provides the rationale and justification for initiating a project or investment1. It includes information such as the objectives, scope, benefits, costs, risks, assumptions, and success criteria of the proposed project or investment2. A risk assessment is a process of identifying, analyzing, and evaluating the potential threats and impacts that could affect the project or investment3. A risk assessment can help to:

Identify the sources and types of risks associated with developing a system with sensitive data, such as data breaches, data loss, data corruption, unauthorized access, compliance violations, etc.4

Analyze the likelihood and severity of the risks occurring and their consequences on the project or investment5

Evaluate the current and planned controls to mitigate or prevent the risks, such as encryption, access control, data backup, data activity monitoring, etc.

Prioritize the risks and controls based on their importance and urgency

Communicate and document the risks and controls to stakeholders and decision-makers

Therefore, a risk assessment to determine the appropriate controls is essential for developing a business case for a system with sensitive data, as it can help to demonstrate the feasibility, viability, and desirability of the project or investment.

The other options are not as important as option A. While it is useful to have an updated enterprise architecture (EA), a skills gap analysis, and the additional cost of encrypting sensitive data, these are more operational and tactical aspects that can be determined later in the implementation phase. They are not critical for developing a business case for a system with sensitive data, which should focus more on the strategic direction and value proposition of the project or investment. References :=

How to Write a Business Case - ProjectManager.com2

Business Case Development - Project Management Institute1

What is Risk Assessment? Definition & Examples | ASQ3

Data Security: How to Secure Sensitive Data - DATAVERSITY4

Risk Analysis: Definition & Examples | ASQ5

Data access control and data activity monitoring - IBM Cloud …

Risk Evaluation: Definition & Examples | ASQ

Risk Communication: Definition & Examples | ASQ

Total cost of ownership (TCO) is the purchase price of an asset plus the costs of operation over its lifespan1. TCO includes hardware and software acquisition, management and support, communications, end-user expenses and the opportunity cost of downtime, training and other productivity losses2. By considering TCO in investment decisions, an enterprise can avoid unexpected costs and optimize the value of its IT assets3. A policy to consider TCO in investment decisions can help the enterprise to plan ahead for the lease or purchase of ITinfrastructure and software licenses, and avoid cost overruns due to lease extensions or other factors. References :=

CGEIT Review Manual (Digital Version), Chapter 4: Value Optimization, Section 4.2: IT Value Delivery, Subsection 4.2.3: IT Resource Management, Page 123

CGEIT Review Manual (Print Version), Chapter 4: Value Optimization, Section 4.2: IT Value Delivery, Subsection 4.2.3: IT Resource Management, Page 123

How to Calculate Total Cost of Ownership for Software - GetApp4

Total Cost of Ownership: How It’s Calculated With Example - Investopedia1

According to the CGEIT exam guide, the risk appetite is the amount and type of risk that an enterprise is willing to accept in pursuit of its objectives. It is a key element of the IT governance framework and should be defined by senior management before developing and managing digital applications for a new enterprise. The risk appetite provides the basis for establishing the risk management strategy, policies and processes, as well as the risk culture and awareness of the enterprise. References: CGEIT Exam Candidate Guide, page 15. CGEIT Certification

IT governance must be a component of enterprise governance, as it ensures that IT supports and enables the achievement of the enterprise goals and objectives. IT governance is the responsibility of the board of directors and executive management, and it is an integral part of enterprise governance123. IT governance also aligns IT with the enterprise strategy, deliversvalue from IT investments, manages IT risks and resources, and measures IT performance3. References := CGEIT Exam Content Outline, Domain 1, Subtopic A: Governance Framework, Task 1: Ensure the definition, establishment, and management of a framework for the governance of enterprise IT in alignment with the mission, vision and values of the enterprise.

The first thing that should be done when developing the metadata management process for the new software platform is to request an impact analysis. An impact analysis is a process of assessing the potential effects of a change on the existing system, processes, and stakeholders1. An impact analysis can help to identify the following aspects2:

The scope and objectives of the change: What are the expected benefits and outcomes of the new software platform? How does it align with the enterprise strategy and goals?

The current state and baseline: What are the existing data sources, formats, standards, and quality levels? How are they documented, stored, and accessed? Who are the data owners, stewards, and users?

The gaps and risks: What are the data changes that will occur due to the new software platform? How will they affect the data quality, security, privacy, and compliance? What are the potential challenges or issues that may arise during or after the transition?

The mitigation and contingency plans: How can the data changes be minimized or avoided? How can the data quality, security, privacy, and compliance be ensured or improved? What are the alternative solutions or fallback options in case of failure or disruption?

By requesting an impact analysis, the organization can gain a better understanding of the data environment and the implications of the new software platform. This can help to develop a metadata management process that is consistent, effective, and adaptable to the change. References: Impact Analysis: A Key Aspect of Preventing Problems | Project …1, Impact Analysis: The Key to Successful Change Management2

 The business strategy requiring significant IT resource scalability over the next five years is the best justification for the decision to outsource portions of IT operations, as it implies that the manufacturing company needs to adapt to changing market demands, customer expectations, and business opportunities. Outsourcing IT operations can provide the company with access to external IT resources, such as infrastructure, software, and services, that can be scaled up or down according to the business needs and goals12. Outsourcing IT operations can also help the company to reduce costs, improve efficiency, and focus on its core competencies