nerdexam
Isaca

CGEIT · Question #74

While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's:

The correct answer is A. culture. When assessing the feasibility of new IT practices and standards for IT governance, it is critical to understand an organization's culture.

Submitted by akirajp· Apr 18, 2026Governance of Enterprise IT

Question

While assessing the feasibility of introducing new IT practices and standards into the IT governance framework, it is CRITICAL to understand an organization's:

Options

  • Aculture.
  • Blevel of outsourcing.
  • Centerprise architecture (EA).
  • Dmaturity of IT processes.

How the community answered

(53 responses)
  • A
    87% (46)
  • B
    4% (2)
  • C
    2% (1)
  • D
    8% (4)

Why each option

When assessing the feasibility of new IT practices and standards for IT governance, it is critical to understand an organization's culture.

Aculture.Correct

Organizational culture significantly impacts how new policies, practices, and standards are received, adopted, and adhered to by employees. A strong understanding of the culture helps in tailoring communication, change management strategies, and implementation approaches to ensure that new IT governance elements are effectively integrated and sustained, rather than resisted or ignored.

Blevel of outsourcing.

While the level of outsourcing is important for operational planning, it is less critical than culture for the overall feasibility and acceptance of new governance practices across the organization.

Centerprise architecture (EA).

Enterprise architecture provides a blueprint for IT, but understanding the existing EA is a technical consideration, whereas culture is about human adoption and adherence to new standards.

Dmaturity of IT processes.

The maturity of IT processes helps determine the ease of implementation, but culture dictates the willingness and ability of people to embrace and comply with new practices, making it a more fundamental critical factor for feasibility.

Concept tested: Organizational change management for IT governance

Source: https://www.isaca.org/resources/isaca-journal/issues/2021/volume-4/the-impact-of-organizational-culture-on-information-security

Topics

#Organizational Culture#IT Governance Implementation#Change Management#Feasibility Assessment

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice