nerdexam
Isaca

CGEIT · Question #17

A board of directors is concerned that a major IT implementation has the potential to significantly disrupt enterprise operations. Which of the following would be MOST helpful in identifying the…

The correct answer is C. A risk assessment of the implementation. To identify the extent of potential disruption from a major IT implementation, a risk assessment of that specific implementation would be most helpful.

Submitted by yaw92· Apr 18, 2026Risk Optimization

Question

A board of directors is concerned that a major IT implementation has the potential to significantly disrupt enterprise operations. Which of the following would be MOST helpful in identifying the extent of the potential impact of the disruption?

Options

  • AAn analysis of the current enterprise risk appetite
  • BAn earned value analysis (EVA) of the implementation
  • CA risk assessment of the implementation
  • DA review of lessons learned from previous implementations

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    72% (21)
  • D
    14% (4)

Why each option

To identify the extent of potential disruption from a major IT implementation, a risk assessment of that specific implementation would be most helpful.

AAn analysis of the current enterprise risk appetite

An analysis of the current enterprise risk appetite helps determine acceptable risk levels but does not, by itself, identify the *extent* of potential impact from a specific implementation.

BAn earned value analysis (EVA) of the implementation

An earned value analysis (EVA) tracks project performance (cost, schedule) but does not primarily focus on identifying or quantifying the potential operational disruption.

CA risk assessment of the implementationCorrect

A risk assessment specifically for the major IT implementation will systematically identify potential threats, vulnerabilities, and the likelihood and impact of various disruptive scenarios on enterprise operations. This process directly quantifies and qualifies the extent of potential impact, providing the board with concrete data to understand and manage the concerns regarding disruption.

DA review of lessons learned from previous implementations

A review of lessons learned from previous implementations provides historical context but may not fully capture the unique or specific risks and impacts of the *current* major IT implementation.

Concept tested: Assessing implementation disruption risk

Topics

#Risk Assessment#IT Risk Management#Impact Analysis#Enterprise Risk

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice