CITM Exam Dumps - EXIN EPI Certified Information Technology Manager

To reduce the risk of fraud in large financial transactions, the security principle ofintegrity(C) requires the highest attention.Integrity, as perISO/IEC 27001’s CIA triad (Confidentiality, Integrity, Availability), ensures that data is accurate, complete, and unaltered. Fraud often involves manipulating transaction data, so controls like data validation, checksums, or audit trails are critical to maintain integrity and prevent unauthorized changes.

Confidentiality (A):Protects data from unauthorized access, less directly related to fraud prevention.

Availability (B):Ensures system access, not the primary concern for fraud.

Reliability (D):Not a standard CIA triad principle; may relate to system performance but not fraud.

When implementing a new system, the customer’s concern about a large impact on the user base suggests the need for a low-risk, controlled adoption strategy. Inapplication management, theparalleladoption approach (B) involves running both the old and new systems simultaneously for a period, allowing users to transition gradually while ensuring the new system functions correctly. This minimizes disruption, as the old system remains operational as a fallback if issues arise with the new system.

Big bang (A):This approach involves switching entirely to the new system at once, which is high-risk and likely to cause significant disruption, especially for a concerned user base. It’s unsuitable here due to the potential for widespread impact.

Coordinated (C):This is not a standard term in application deployment strategies. It may imply a managed transition but lacks the specificity of parallel or phased approaches.

Phased (D):This involves rolling out the new system incrementally (e.g., by department or module), which reduces risk but doesn’t provide the same level of safety as parallel, where both systems run concurrently to ensure continuity.

Theparallelapproach is ideal for mitigating risks during a critical system transition, as it allows validation of the new system’s performance while maintaining business continuity. According toITILorSDLCframeworks, parallel adoption is often recommended for mission-critical systems to ensure stability and user acceptance.

InITIL, theservice operationphase focuses on delivering and managing services, including activities like communicating scheduled outages (A), reporting service performance (B), and handling escalations (C).Defining service strategy(D) is part of theservice strategyphase, not service operation, as it involves planning and aligning services with business goals.

SMART(Specific, Measurable, Achievable, Relevant, Time-bound) is a goal-setting framework commonly associated withManagement By Objectives (MBO). MBO involves setting clear, measurable objectives for employees, aligning individual performance with organizational goals. In appraisal meetings, using SMART conditions ensures that performance goals are clearly defined and trackable, which is a hallmark of MBO.

Graphic rating scales (B) involve rating employees on a scale for various traits, not necessarily tied to SMART goals. Ranking (C) and Performance ranking method (D) focus on comparing employees, which doesn’t align with SMART’s emphasis on individual, objective-based performance evaluation.

The primary reason for includinganonymous feedbackin feedback collection is topromote honest feedback while avoiding fear for backfiring on the participant(B). Anonymity encourages participants to provide candid, truthful responses without worrying about repercussions, such as criticism or retaliation, which is critical inservice managementfor gathering accurate insights into service quality or issues. According toITIL’s continual service improvement (CSI), honest feedback is essential for identifying areas for improvement.

Avoidance of non-compliance (A):Anonymity is unrelated to regulatory compliance in this context.

Easier processing of data (C):Anonymity may complicate data processing by removing identifiers, not simplifying it.

Reduced time (D):Anonymity doesn’t inherently reduce the time required for feedback.