IT Governance And Management - Level 1

Approved & Edited by ProProfs Editorial Team

The editorial team at ProProfs Quizzes consists of a select group of subject experts, trivia writers, and quiz masters who have authored over 10,000 quizzes taken by more than 100 million users. This team includes our in-house seasoned quiz moderators and subject matter experts. Our editorial experts, spread across the world, are rigorously trained using our comprehensive guidelines to ensure that you receive the highest quality quizzes.

Learn about Our Editorial Process

| By Jeremy.wallin

Jeremy.wallin

Community Contributor

Quizzes Created: 3 | Total Attempts: 325

Questions: 20 | Attempts: 231 | Updated: Jan 27, 2023

Questions

Settings

Feedback

During the Quiz End of Quiz

Difficulty

Sequential Easy First Hard First

Play as

Quiz Flashcard

Create your own Quiz

IT Governance And Management - Level 1 - Quiz

Questions and Answers

1.

Properly implemented, ___________ is a process whereby senior management exerts strategic control over business functions through policies, objectives, delegation of authority, and monitoring.

Explanation
Governance, when properly implemented, allows senior management to exert strategic control over business functions through policies, objectives, delegation of authority, and monitoring. This implies that governance is a structured and systematic approach that enables senior management to oversee and guide the organization's activities, ensuring that they align with the overall strategic direction and goals. Through governance, senior management can establish rules, allocate responsibilities, and monitor performance to ensure effective decision-making and accountability throughout the organization.

Rate this question:

4
2.

Properly implemented, governance is a process whereby senior management exerts strategic control over business functions through _______, __________, delegation of ______________, and ___________.

Explanation
Governance, when properly implemented, involves senior management exerting strategic control over business functions through the establishment of policies, setting clear objectives, delegating authority, and monitoring progress. This ensures that the organization operates in line with established guidelines and goals, while also allowing for effective decision-making and accountability.

Rate this question:

4
3.

Governance begins with the establishment of top-level objectives and policies that are translated into ______ actions, ______, ________, ___________, and other activities downward through each level in the organization.

Explanation
Governance begins with the establishment of top-level objectives and policies. These policies are then translated into actions, processes, procedures, and other activities that are implemented at each level within the organization. This ensures that the organization operates in accordance with the set objectives and policies, and allows for effective decision-making and accountability.

Rate this question:

4
4.

Some IT personnel need to spend at least part of their time developing plans for what the __ ___________ will be doing two, three, or more years in the future.

Explanation
IT personnel need to spend time developing plans for what the IT organization will be doing in the future because it is essential for the success and growth of the organization. By planning ahead, they can anticipate technological advancements, industry trends, and business needs, allowing them to align their strategies and resources accordingly. This proactive approach ensures that the IT organization remains competitive, adaptable, and able to meet the evolving demands of the business. It also helps in identifying potential risks and challenges, enabling them to develop mitigation strategies and contingency plans.

Rate this question:

1
4 0
5.

_____________ state only what must be done (or not done) in an IT organization.

Explanation
Policies are a set of guidelines or rules that define what actions must be taken or avoided within an IT organization. These policies serve as a framework for decision-making and provide employees with clear instructions on how to handle various situations. By following these policies, organizations can ensure consistency, compliance with regulations, and efficient operations.

Rate this question:

4
6.

Risk management is a _________ ____________ activity that has no beginning and no end.

Explanation
Risk management is a continuous process that does not have a specific starting or ending point. It is an ongoing activity that spans throughout the entire life cycle of a project, organization, or any other endeavor. This means that risk management should be integrated into every stage and aspect of the process, from planning and implementation to monitoring and evaluation. By considering risks at every step, organizations can proactively identify and address potential threats, minimizing their impact and maximizing opportunities for success.

Rate this question:

4
7.

The primary services in the IT organization typically are _______, _________, and ________.

Explanation
The primary services in the IT organization typically include development, operations, and support. Development refers to the creation and improvement of software applications and systems. Operations involve the management and maintenance of the IT infrastructure and network. Support entails providing assistance and troubleshooting for end-users and resolving technical issues. These three services are essential for the smooth functioning of an IT organization, as they cover the entire software development lifecycle and ensure efficient and reliable IT operations.

Rate this question:

4
8.

Organizations require ______________ to distribute responsibility to groups of people with specific skills and knowledge.

Explanation
Organizations require structure to distribute responsibility to groups of people with specific skills and knowledge. A well-defined structure helps in organizing tasks, roles, and responsibilities within an organization. It provides clarity on reporting relationships, communication channels, and decision-making processes. With a clear structure in place, organizations can effectively allocate tasks to individuals or teams who possess the required expertise, ensuring that responsibilities are distributed appropriately and that work is efficiently coordinated.

Rate this question:

4
9.

Because IT governance is more about business processes than technology. audits of IT governance rely more on ________ and ___________ reviews than on inspections of information systems.

Explanation
IT governance is primarily concerned with aligning IT strategies and processes with business objectives. Therefore, audits of IT governance focus more on understanding and evaluating the effectiveness of business processes rather than inspecting information systems directly. Interviews with key stakeholders and documentation review are effective methods to assess the design and implementation of IT governance processes, as they provide insights into how the organization manages and controls its IT activities. These methods allow auditors to gather information about the organization's IT governance framework, policies, procedures, and controls, which are crucial for ensuring the alignment of IT with business goals.

Rate this question:

4
10.

Governance begins with the establishment of top-level objectives and policies that are translated into more actions, ______, ________, ___________, and other activities downward through each level in the organization.

Explanation
Governance starts with setting top-level objectives and policies. These policies are then implemented through various processes, procedures, and other activities at each level of the organization. This ensures that the objectives and policies are effectively executed and followed throughout the organization, promoting consistency and alignment with the overall goals.

Rate this question:

4
11.

Governance begins with the establishment of top-level objectives and policies that are translated into ______ actions, policies, ________, ___________, and other activities downward through each level in the organization.

Explanation
Governance begins with the establishment of top-level objectives and policies that are translated into more actions, policies, processes, procedures, and other activities downward through each level in the organization. This means that once the top-level objectives and policies are set, they need to be implemented and executed through various processes and procedures. These processes and procedures help in ensuring that the objectives and policies are effectively carried out at every level of the organization, promoting efficiency and consistency in decision-making and operations.

Rate this question:

4
12.

Governance begins with the establishment of top-level objectives and policies that are translated into ______ actions, ______, processes, ___________, and other activities downward through each level in the organization.

Explanation
Governance begins with the establishment of top-level objectives and policies that are translated into more policies, procedures, processes, and other activities downward through each level in the organization. This means that once the top-level objectives and policies are set, they need to be further broken down into more specific policies and procedures that guide the actions and processes within the organization. This ensures that there is a clear framework in place for decision-making and execution at all levels of the organization, promoting effective governance.

Rate this question:

4
13.

Governance begins with the establishment of top-level objectives and policies that are translated into ______ actions, ______, ________, procedures, and other activities downward through each level in the organization.

Explanation
The correct answer is "more policies processes" because governance involves the implementation of top-level objectives and policies throughout the organization. These objectives and policies are translated into actions, processes, procedures, and other activities that are cascaded downward through each level in the organization. Therefore, the establishment of more policies and processes is essential for effective governance.

Rate this question:

4
14.

This group will advise the board of directors on strategies to enable better IT support of the organization’s overall strategy and objectives.

Explanation
The IT Strategy Committee is a group that provides advice and guidance to the board of directors on strategies to enhance IT support for the organization's overall strategy and objectives. This committee is responsible for analyzing the current IT infrastructure, identifying areas for improvement, and recommending strategies to align IT initiatives with the organization's goals. By having a dedicated committee focused on IT strategy, the organization can ensure that its technological resources are effectively utilized to support the overall business strategy.

Rate this question:

4
15.

In the BSC, management defines key performance indicators in each of four perspectives: • Financial Key financial items measured include the cost of strategic initiatives, support costs of key applications, and capital investment. • Customer Key measurements include the satisfaction rate with various customer-facing aspects of the organization. • Internal processes Measurements of key activities include the number of projects and the effectiveness of key internal workings of the organization. • Innovation and learning Human-oriented measurements include turnover, illness, internal promotions, and training. Gregory, Peter H.. CISA Certified Information Systems Auditor All-in-One Exam Guide, Fourth Edition (p. 22). McGraw-Hill Education. Kindle Edition.
16.

The standard IT-BSC has four perspectives: • Business contribution Key indicators here are the perception of IT department effectiveness and value as seen from other (non-IT) corporate executives. • User Key measurements include end-user satisfaction rate with IT systems and the IT support organization. Satisfaction rates of external users should be included if the IT department builds or supports externally facing applications or systems. • Operational excellence Key measurements include the number of support cases, amount of unscheduled downtime, and defects reported. • Innovation This includes the rate at which the IT organization utilizes newer technologies to increase IT value and the amount of training made available to IT staff. Gregory, Peter H.. CISA Certified Information Systems Auditor All-in-One Exam Guide, Fourth Edition (p. 23). McGraw-Hill Education. Kindle Edition.
17.

Level, IT strategic planning is about the ability to provide the capability and capacity for IT services that will match the levels of and the types of business activities that the organization expects to achieve at certain points in the future. Gregory, Peter H.. CISA Certified Information Systems Auditor All-in-One Exam Guide, Fourth Edition (pp. 26-27). McGraw-Hill Education. Kindle Edition.
18.

A steering committee is a body of senior managers or executives that meets from time to time to discuss high-level and long-term issues in the organization. Gregory, Peter H.. CISA Certified Information Systems Auditor All-in-One Exam Guide, Fourth Edition (p. 27). McGraw-Hill Education. Kindle Edition.
19.

Security governance is the collection of management activities that establishes key roles and responsibilities, identifies and treats risks to key assets, and measures key security processes. Gregory, Peter H.. CISA Certified Information Systems Auditor All-in-One Exam Guide, Fourth Edition (p. 23). McGraw-Hill Education. Kindle Edition.
20.

The main roles and responsibilities for security should be as follows: • Board of directors The board is responsible for establishing the tone for risk appetite and risk management in the organization. To the extent that the board of directors establishes business and IT security, so, too, should the board consider risk and security in that strategy. • Steering committee The security steering committee should establish the operational strategy for security and risk management in the organization. This includes setting strategic and tactical roles and responsibilities in more detail than was done by the board of directors. The security strategy should be in harmony with the strategy for IT and the business overall. The steering committee should also ratify security policy and other strategic policies and processes developed by the chief information security officer. • Chief information security officer (CISO) The CISO should be responsible for developing security policy; conducting risk assessments; developing processes for risk management, vulnerability management, incident management, identity and access management, security awareness and training, third-party risk management, and compliance management; and informing the steering committee and board of directors of incidents and new or changed risks. In some organizations, this is known as the chief information risk officer (CIRO). Gregory, Peter H.. CISA Certified Information Systems Auditor All-in-One Exam Guide, Fourth Edition (pp. 23-24). McGraw-Hill Education. Kindle Edition.

Explanation
The correct answer is Chief Information Security Officer (CISO). The CISO is responsible for developing security policy, conducting risk assessments, developing processes for risk management, incident management, and compliance management. They also inform the steering committee and board of directors of incidents and new or changed risks. In some organizations, this role is known as the Chief Information Risk Officer (CIRO). This explanation summarizes the responsibilities and duties of the CISO in ensuring the security and risk management of an organization's information systems.

Rate this question:

4

Quiz Review Timeline +

Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.

Current Version
Jan 27, 2023

Quiz Edited by
ProProfs Editorial Team
May 11, 2020

Quiz Created by
Jeremy.wallin

IT Governance And Management - Level 1

Properly implemented, ___________ is a process whereby senior management exerts strategic control over business functions through policies, objectives, delegation of authority, and monitoring.

Properly implemented, governance is a process whereby senior management exerts strategic control over business functions through _, , delegation of , and _.

Governance begins with the establishment of top-level objectives and policies that are translated into actions, , , _______, and other activities downward through each level in the organization.

Some IT personnel need to spend at least part of their time developing plans for what the _________ will be doing two, three, or more years in the future.

_____________ state only what must be done (or not done) in an IT organization.

Risk management is a _ ____ activity that has no beginning and no end.

The primary services in the IT organization typically are ___, _, and ____.

Organizations require ______________ to distribute responsibility to groups of people with specific skills and knowledge.

Because IT governance is more about business processes than technology. audits of IT governance rely more on and ___ reviews than on inspections of information systems.

Governance begins with the establishment of top-level objectives and policies that are translated into more actions, , , _____, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into actions, policies, , _____, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into actions, , processes, _______, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into actions, , ____, procedures, and other activities downward through each level in the organization.

This group will advise the board of directors on strategies to enable better IT support of the organization’s overall strategy and objectives.

IT Governance And Management - Level 1

Properly implemented, ___________ is a process whereby senior management exerts strategic control over business functions through policies, objectives, delegation of authority, and monitoring.

Properly implemented, governance is a process whereby senior management exerts strategic control over business functions through _______, __________, delegation of ______________, and ___________.

Governance begins with the establishment of top-level objectives and policies that are translated into ______ actions, ______, ________, ___________, and other activities downward through each level in the organization.

Some IT personnel need to spend at least part of their time developing plans for what the __ ___________ will be doing two, three, or more years in the future.

_____________ state only what must be done (or not done) in an IT organization.

Risk management is a _________ ____________ activity that has no beginning and no end.

The primary services in the IT organization typically are _______, _________, and ________.

Organizations require ______________ to distribute responsibility to groups of people with specific skills and knowledge.

Because IT governance is more about business processes than technology. audits of IT governance rely more on ________ and ___________ reviews than on inspections of information systems.

Governance begins with the establishment of top-level objectives and policies that are translated into more actions, ______, ________, ___________, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into ______ actions, policies, ________, ___________, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into ______ actions, ______, processes, ___________, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into ______ actions, ______, ________, procedures, and other activities downward through each level in the organization.

This group will advise the board of directors on strategies to enable better IT support of the organization’s overall strategy and objectives.

Properly implemented, governance is a process whereby senior management exerts strategic control over business functions through _, , delegation of , and _.

Governance begins with the establishment of top-level objectives and policies that are translated into actions, , , _______, and other activities downward through each level in the organization.

Some IT personnel need to spend at least part of their time developing plans for what the _________ will be doing two, three, or more years in the future.

Risk management is a _ ____ activity that has no beginning and no end.

The primary services in the IT organization typically are ___, _, and ____.

Because IT governance is more about business processes than technology. audits of IT governance rely more on and ___ reviews than on inspections of information systems.

Governance begins with the establishment of top-level objectives and policies that are translated into more actions, , , _____, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into actions, policies, , _____, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into actions, , processes, _______, and other activities downward through each level in the organization.

Governance begins with the establishment of top-level objectives and policies that are translated into actions, , ____, procedures, and other activities downward through each level in the organization.