CGEIT · Question #280
Acceptance of an enterprise's newly implemented IT governance initiatives has been resisted by a functional group requesting more autonomy over technology choices. Which of the following is MOST…
The correct answer is C. An exception management process. An exception management process provides a formal, controlled mechanism to allow deviations from standard IT governance policies or architecture without undermining overall control. It enables functional groups to gain autonomy in specific cases while ensuring that exceptions…
Question
Acceptance of an enterprise's newly implemented IT governance initiatives has been resisted by a functional group requesting more autonomy over technology choices. Which of the following is MOST important to accommodate this need for autonomy?
Options
- AContinuous improvement processes
- BDocumentation of key management practices
- CAn exception management process
- DA change control process
How the community answered
(27 responses)- A4% (1)
- B4% (1)
- C81% (22)
- D11% (3)
Explanation
An exception management process provides a formal, controlled mechanism to allow deviations from standard IT governance policies or architecture without undermining overall control. It enables functional groups to gain autonomy in specific cases while ensuring that exceptions are documented, approved, monitored, and aligned with risk management practices. This approach balances the need for governance consistency with flexibility, allowing innovation and local decision-making within defined boundaries. According to PRINCE2 and other governance frameworks, exception management involves setting tolerances, delegating authority within those limits, and escalating issues only when tolerances are breached. This supports autonomy while maintaining oversight.
Topics
Community Discussion
No community discussion yet for this question.