CGEIT Question #281: Real Exam Question with Answer & Explanation

Question

A board of directors wants to ensure the enterprise is responsive to changes in its environment that would directly impact critical business processes. Which of the following will BEST facilitate meeting this objective?

Options

• AScheduling frequent threat analyses
• BMonitoring key risk indicators (KRIs)
• CRegularly reviewing the enterprise risk appetite
• DImplementing a competitive intelligence tool

Explanation

Monitoring key risk indicators (KRIs) will best facilitate the board's objective to ensure enterprise responsiveness to environmental changes impacting critical business processes.

Common mistakes.

• A. Scheduling frequent threat analyses is important for identifying new threats, but KRIs offer a continuous, dynamic monitoring mechanism for emerging risks and changes across the enterprise.
• C. Regularly reviewing the enterprise risk appetite establishes the boundaries for acceptable risk but doesn't provide the real-time monitoring needed to ensure responsiveness to ongoing environmental shifts.
• D. Implementing a competitive intelligence tool focuses on market and competitor analysis, which is broader than the specific objective of monitoring direct impacts on critical business processes from environmental changes.

Concept tested. Risk monitoring and early warning systems

Reference. https://www.isaca.org/resources/isaca-journal/issues/2009/volume-1/the-use-of-key-risk-indicators-in-it-governance

No community discussion yet for this question.