nerdexam
Isaca

CGEIT · Question #453

The CIO of a financial and insurance company is considering the projects and portfolio for the coming year Which of the following projects is a non-discretionary project?

The correct answer is B. Compliance with statutory regulations. A non-discretionary project is one that an organization must undertake, typically due to external mandates or critical operational necessity, making compliance with statutory regulations a prime example.

Submitted by manish99· Apr 18, 2026Governance of Enterprise IT

Question

The CIO of a financial and insurance company is considering the projects and portfolio for the coming year Which of the following projects is a non-discretionary project?

Options

  • AData center relocation
  • BCompliance with statutory regulations
  • CActuarial application system analysis and design
  • DCore banking applications scalability assessment

How the community answered

(45 responses)
  • A
    7% (3)
  • B
    76% (34)
  • C
    13% (6)
  • D
    4% (2)

Why each option

A non-discretionary project is one that an organization *must* undertake, typically due to external mandates or critical operational necessity, making compliance with statutory regulations a prime example.

AData center relocation

A data center relocation, while potentially complex and expensive, is a business decision driven by efficiency or capacity needs, making it a discretionary project.

BCompliance with statutory regulationsCorrect

Compliance with statutory regulations is a non-discretionary project because it is legally mandated, and failure to comply can result in severe penalties, fines, and reputational damage. These projects are necessary to maintain the organization's license to operate and are not optional investment choices.

CActuarial application system analysis and design

Actuarial application system analysis and design is an enhancement or development project aimed at improving business capabilities, which is a discretionary investment.

DCore banking applications scalability assessment

A core banking applications scalability assessment is an evaluation aimed at future improvements or risk mitigation, making it a discretionary project for investment.

Concept tested: Identifying non-discretionary projects

Source: https://www.isaca.org/resources/cobit/cobit-2019-framework

Topics

#Project classification#Regulatory compliance#Portfolio management#IT governance

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice