nerdexam
Isaca

CGEIT · Question #695

Which of the following is the BEST indicator of effective IT governance?

The correct answer is B. Executive management is involved in important IT decisions and activities. The best indicator of effective IT governance is when executive management is actively involved in important IT decisions and activities.

Submitted by priya_blr· Apr 18, 2026Governance of Enterprise IT

Question

Which of the following is the BEST indicator of effective IT governance?

Options

  • ARegulatory authorities have given a favorable report on IT controls.
  • BExecutive management is involved in important IT decisions and activities.
  • CThe chief information security officer (CISO) reports to a board member.
  • DIT management is proactive in reporting IT project status to executive management.

How the community answered

(32 responses)
  • A
    9% (3)
  • B
    81% (26)
  • C
    3% (1)
  • D
    6% (2)

Why each option

The best indicator of effective IT governance is when executive management is actively involved in important IT decisions and activities.

ARegulatory authorities have given a favorable report on IT controls.

Favorable regulatory reports indicate compliance, which is a component of good governance, but not the best overall indicator of its strategic effectiveness and integration.

BExecutive management is involved in important IT decisions and activities.Correct

Active involvement from executive management demonstrates that IT is recognized as a strategic asset, deeply integrated into the overall business strategy and decision-making processes. This engagement ensures that IT investments align with business objectives, risks are managed appropriately, and IT delivers tangible value to the enterprise.

CThe chief information security officer (CISO) reports to a board member.

The CISO reporting structure is important for security governance, but it is one specific aspect and does not encompass the full scope of effective IT governance.

DIT management is proactive in reporting IT project status to executive management.

Proactive reporting by IT management is good operational practice, but executive management's direct involvement in decisions is a stronger sign of strategic governance.

Concept tested: Effective IT governance indicators

Source: https://www.iso.org/standard/69591.html

Topics

#IT governance#Executive involvement#Governance effectiveness#IT-business alignment

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice