nerdexam
Isaca

CGEIT · Question #444

An enterprise's global IT program management office (PMO) has recently discovered that several IT projects are being run within a specific region without knowledge of the PMO. The projects are on…

The correct answer is A. Inability to reduce the impact to the risk level of the global portfolio. The PMO's primary concern when projects run regionally without its knowledge, even if successful locally, should be the inability to reduce the impact to the risk level of the global portfolio.

Submitted by kwame.gh· Apr 18, 2026Risk Optimization

Question

An enterprise's global IT program management office (PMO) has recently discovered that several IT projects are being run within a specific region without knowledge of the PMO. The projects are on time, on budget, and will deliver the proposed benefits to the specific region. Which of the following should be the PRIMARY concern of the PMO?

Options

  • AInability to reduce the impact to the risk level of the global portfolio
  • BProjects may not follow system development life cycle (SDLC)
  • CLack of control and impact to the overall PMO budget

How the community answered

(40 responses)
  • A
    83% (33)
  • B
    8% (3)
  • C
    10% (4)

Why each option

The PMO's primary concern when projects run regionally without its knowledge, even if successful locally, should be the inability to reduce the impact to the risk level of the global portfolio.

AInability to reduce the impact to the risk level of the global portfolioCorrect

The PMO's role is to manage and oversee the entire portfolio of projects to optimize resource allocation, ensure strategic alignment, and manage overall organizational risk. Projects outside PMO oversight, even if locally successful, represent shadow IT that can introduce unmanaged risks, dependencies, and inconsistencies to the global portfolio (e.g., security vulnerabilities, integration issues, resource conflicts), which the PMO cannot mitigate or account for.

BProjects may not follow system development life cycle (SDLC)

While not following SDLC is a valid concern for project quality, the immediate and broader strategic concern for a PMO managing a global portfolio is the unmanaged risk these shadow projects pose to the entire enterprise.

CLack of control and impact to the overall PMO budget

Lack of control and impact to the overall PMO budget is a consequence, but the underlying issue that poses the greatest systemic threat to a global enterprise is the unmanaged risk these projects introduce to the entire portfolio.

Concept tested: Program/portfolio risk management and shadow IT

Source: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/govern/policy-compliance/design-principle-enterprise-policy

Topics

#Global Portfolio Risk#PMO Oversight#Enterprise Risk Management#Unmanaged IT Projects

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice