nerdexam
Isaca

CGEIT · Question #456

A project sponsor has circumvented the request for proposal (RFP) selection process. Which of the following is the MOST likely reason for this control gap?

The correct answer is C. Lack of accountability for policy adherence. The circumvention of an RFP process by a project sponsor indicates a control gap primarily stemming from a lack of accountability for adhering to established policies.

Submitted by lukas.cz· Apr 18, 2026Governance of Enterprise IT

Question

A project sponsor has circumvented the request for proposal (RFP) selection process. Which of the following is the MOST likely reason for this control gap?

Options

  • AInadequate stage-gate reviews
  • BInadequate board oversight
  • CLack of accountability for policy adherence
  • DLack of a legal and regulatory review process

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    84% (27)
  • D
    9% (3)

Why each option

The circumvention of an RFP process by a project sponsor indicates a control gap primarily stemming from a lack of accountability for adhering to established policies.

AInadequate stage-gate reviews

Inadequate stage-gate reviews would prevent progress to the next stage if requirements aren't met, but circumvention implies avoiding the process entirely, not failing a review.

BInadequate board oversight

While inadequate board oversight could be a contributing factor to overall governance issues, the direct cause of an individual circumvention is usually closer to the operational level of accountability.

CLack of accountability for policy adherenceCorrect

When a project sponsor bypasses an established process like an RFP, it points directly to a failure in enforcing organizational policies and holding individuals accountable for following them. This control gap allows an individual to act outside defined governance without consequence, thereby undermining internal controls.

DLack of a legal and regulatory review process

A lack of a legal and regulatory review process is a separate issue related to compliance with external laws, not internal process adherence by an individual.

Concept tested: Project governance and accountability

Source: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/governance

Topics

#Accountability#Internal Controls#Policy Adherence#Project Governance

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice