CGEIT · Question #74
While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's:
The correct answer is A. culture. When assessing the feasibility of new IT practices and standards for IT governance, it is critical to understand an organization's culture.
Question
While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's:
Options
- Aculture.
- Blevel of outsourcing.
- Centerprise architecture (EA).
- Dmaturity of IT processes.
How the community answered
(53 responses)- A87% (46)
- B4% (2)
- C2% (1)
- D8% (4)
Why each option
When assessing the feasibility of new IT practices and standards for IT governance, it is critical to understand an organization's culture.
Organizational culture significantly impacts how new policies, practices, and standards are received, adopted, and adhered to by employees. A strong understanding of the culture helps in tailoring communication, change management strategies, and implementation approaches to ensure that new IT governance elements are effectively integrated and sustained, rather than resisted or ignored.
While the level of outsourcing is important for operational planning, it is less critical than culture for the overall feasibility and acceptance of new governance practices across the organization.
Enterprise architecture provides a blueprint for IT, but understanding the existing EA is a technical consideration, whereas culture is about human adoption and adherence to new standards.
The maturity of IT processes helps determine the ease of implementation, but culture dictates the willingness and ability of people to embrace and comply with new practices, making it a more fundamental critical factor for feasibility.
Concept tested: Organizational change management for IT governance
Source: https://www.isaca.org/resources/isaca-journal/issues/2021/volume-4/the-impact-of-organizational-culture-on-information-security
Topics
Community Discussion
No community discussion yet for this question.