CGEIT Exam Questions

An enterprise is concerned that ongoing maintenance costs are not being considered when prioritizing IT-enabled business investments. Which of the following should be the enterpris...

Which of the following would BEST help to prevent an IT system from becoming obsolete before its planned return on investment (ROI)?

Despite an adequate training budget. IT staff are not keeping skills current with emerging technologies critical to the business. Which of the following is the BEST way for the ent...

Which of the following BEST facilitates the adoption of an IT governance program in an enterprise?

When conducting a risk assessment in support of a new regulatory requirement, the IT risk committee should FIRST consider the:

An IT steering committee is concerned about staff saving data files containing sensitive corporate information on publicly available cloud file storage applications. Which of the f...

ACIO determines IT investment management processes are not fully realizing the benefits identified in business cases. Which of the following would be the BEST way to prevent this i...

An enterprise's IT department has been operating independently without regard to business concerns, leading to misalignment between business and IT. The BEST way to establish align...

Which of the following is the BEST way for a CIO to assess the consistency of IT processes against industry benchmarks to determine where to focus improvement initiatives?

Which of the following is the BEST indication of an effective information governance model?

Which of the following BEST helps to ensure that IT policies are aligned with organizational strategies?

Within a governance structure for risk management, which of the following activities should be performed by the second line of defense?

Which of the following is the PRIMARY role of the CEO in IT governance?

An IT governance committee realizes there are antiquated technologies in use throughout the enterprise. Which of the following is the BEST group to evaluate the recommendations to...

Which of the following would be an IT steering committee's BEST course of action upon learning business units have been independently procuring cloud services?

Which of the following would be the BEST way for an enterprise to address new legal and regulatory requirements applicable to IT?

An enterprise is exploring a new business opportunity. Which of the following is the BEST way to help ensure related IT projects deliver the business requirements?

Which of the following is MOST likely to have a negative impact on accountability for information risk ownership?

Which of the following should a CIO review to obtain a holistic view of IT performance when identifying potential gaps in service delivery?

Which of the following should be considered FIRST when assessing the implications of new external regulations on IT compliance?

Which of the following is the GREATEST consideration when evaluating whether to comply with the new carbon footprint regulations impacted by blockchain technology?

Which of the following is the MOST important consideration regarding IT measures as part of an IT strategic plan?

An enterprise wants to reduce the complexity of its data assets while ensuring impact to the business is minimized during the transition. Which of the following should be done FIRS...

An interna! health organization has been notified that a data breach has resulted in patient records being published online. Which of the following is MOST important consideration...

Which of the following BEST supports an IT strategy committee's objective to align employee competencies with planned initiatives?

Which of the following is a CIO's BEST approach to ensure IT executes against an approved strategy?

An IT governance committee is reviewing its current risk management policy in light of increased usage of social media within an enterprise. The FIRST task for the governance commi...

When reporting key risk indicators (KRIs) to the board, what information BEST enables risk- based decision-making?

Which of the following is the FIRST step when developing an IT risk management framework?

Which of the following would be the GREATEST obstacle for effective implementation of an enterprise's information security policy?

From a governance perspective, which of the following functions MUST approve the agreed-upon criteria for a new technology-enabled service before submitting the final high-level de...

An enterprise has decided to adopt cloud services. Which of the following should be established FIRST?

Which of the following BEST enables the alignment of user access rights with business requirements?

Which of the following BEST provides an enterprise with greater insight into its environmental, social, and governance (ESG) metrics?

Which of the following is the MOST important course of action when initiating a procurement process for a Zero Trust solution?

The board directed the CIO to ensure that required IT resources are available to execute a new enterprise strategy. Which of the following should be done FIRST to support this init...

A newly appointed CIO is concerned that IT is too reactive and wants to ensure IT adds value to the enterprise by proactively anticipating business needs. Which of the following wi...

Which of the following should be done FIRST when developing an IT strategy to support a new AI business strategy?

When determining the desired maturity levels for IT governance processes, it is MOST important to:

Which of the following situations provides the BEST justification for considering the adoption of a qualitative risk assessment method?

The board of an organization has been informed of possible cyberthreats. Which of the following should be the board's NEXT course of action?

When developing IT risk management policies and standards, it is MOST important to align them with:

Executive management is concerned that IT has not achieved its performance targets. At the end of the fiscal year, it was noted the reason was largely due to insufficient spending...

Which of the following is the BEST way to express the value of financial investments in cybersecurity?

An enterprise has launched a digitization effort requiring a single view of customer information across all product lines. Which of the following should be done FIRST to enable thi...

Which of the following should be the PRIMARY consideration when developing an IT strategy for the global implementation of Internet of Things (IoT) solutions?

Which of the following is the BEST way to minimize the potential mishandling of customer personal information in a system that is located in a country with strict privacy regulatio...

Which of the following is MOST important to ensure when aligning IT and enterprise resource management processes?

A CIO engages a consulting firm to conduct a benchmark analysis of the organization's IT governance framework against industry best practices. Several recommendations to improve th...

A global organization has noticed a significant decrease in the return on IT investments in a particular region. To enhance project governance in this region, the CEO should FIRST