nerdexam
Isaca

CGEIT · Question #507

Which of the following should be the PRIMARY consideration when implementing an emerging technology with unclear regulatory and compliance requirements?

The correct answer is C. Enterprise risk appetite. When introducing emerging technologies with uncertain regulatory landscapes, the primary consideration should be the organization's risk appetite to ensure the potential exposure aligns with acceptable risk levels.

Submitted by neha2k· Apr 18, 2026Governance of Enterprise IT

Question

Which of the following should be the PRIMARY consideration when implementing an emerging technology with unclear regulatory and compliance requirements?

Options

  • AEnterprise strategic plan
  • BEnterprise architecture (EA) alignment
  • CEnterprise risk appetite
  • DBusiness impact analysis (BIA) results

How the community answered

(42 responses)
  • A
    5% (2)
  • B
    10% (4)
  • C
    83% (35)
  • D
    2% (1)

Why each option

When introducing emerging technologies with uncertain regulatory landscapes, the primary consideration should be the organization's risk appetite to ensure the potential exposure aligns with acceptable risk levels.

AEnterprise strategic plan

While the enterprise strategic plan guides overall direction, it doesn't specifically address the immediate challenge of unclear regulatory risk for an emerging technology without first understanding the organization's tolerance for such risk.

BEnterprise architecture (EA) alignment

Enterprise architecture alignment ensures technical consistency, but it does not address the fundamental question of whether the regulatory and compliance risks of an emerging technology are acceptable to the business.

CEnterprise risk appetiteCorrect

Enterprise risk appetite defines the level of risk an organization is prepared to accept, pursue, or tolerate to achieve its objectives. With emerging technology and unclear regulatory/compliance requirements, the risk appetite is the primary lens through which to evaluate whether the potential unknown risks associated with legal and regulatory non-compliance are acceptable for the organization.

DBusiness impact analysis (BIA) results

Business Impact Analysis (BIA) results focus on the impact of disruption to existing critical business functions, not directly on the unknown regulatory risks of implementing a new, emerging technology.

Concept tested: Emerging technology risk assessment

Topics

#Emerging Technology#Regulatory Compliance#Risk Appetite#IT Risk Management

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice