CGEIT Exam Dumps | An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues

<< Prev Question Next Question >>

Question 125/254

An IT audit report indicates that a lack of IT employee risk awareness is creating serious security issues in application design and configuration. Which of the following would be the BEST key risk indicator (KRI) to show progress in IT employee behavior?

A. Number of IT employees attending security training sessions

B. Results of application security testing

C. Number of reported security incidents

D. Results of application security awareness training quizzes

Question List (254q): Question 1: Which of the following is the MOST important consideration r...; Question 2: When identifying improvements focused on the information ass...; Question 3: An enterprise has developed a new digital strategy to improv...; Question 4: An enterprise has launched a series of critical new IT initi...; Question 5: A company is considering selling products online, and the CI...; Question 6: When selecting a cloud provider, which of the following prov...; Question 7: Which of the following is MOST important to consider when pl...; Question 8: An enterprise is implementing a new IT governance program. W...; Question 9: Which of the following provides the BEST assurance on the ef...; Question 10: An enterprise is planning to outsource data processing for p...; Question 11: Which of the following is the PRIMARY element in sustaining ...; Question 12: A newly hired CIO has been told the enterprise has an establ...; Question 13: A large enterprise is implementing an information security p...; Question 14: Which of the following is the MOST comprehensive method to r...; Question 15: Senior management is reviewing the results of a recent secur...; Question 16: The FIRST step in aligning resource management to the enterp...; Question 17: An enterprise is planning to replace multiple enterprise res...; Question 18: Which of the following should be the MOST important consider...; Question 19: A CEO is concerned that IT costs have significantly exceeded...; Question 20: Which of the following is the BEST approach when reviewing T...; Question 21: An enterprise has entered into a new market which brings add...; Question 22: An enterprise is assessing whether to utilize wearable techn...; Question 23: Reviewing which of the following should be the FIRST step wh...; Question 24: Which of the following should be the FIRST consideration for...; Question 25: The BEST way for a CIO to monitor the alignment between the ...; Question 26: To evaluate IT resource management, it is MOST important to ...; Question 27: Due to the recent introduction of personal data protection r...; Question 28: Which of the following would be the PRIMARY impact on IT gov...; Question 29: IT governance within an enterprise is attempting to drive a ...; Question 30: An internal audit of a large financial institution found tha...; Question 31: A CIO was notified that a new employee was observed wearing ...; Question 32: Which of the following aspects of IT governance BEST address...; Question 33: An enterprise is adopting a new governance framework. Of the...; Question 34: An enterprise has decided to implement an enterprise resourc...; Question 35: Which of the following should be the PRIMARY goal of impleme...; Question 36: Which of the following BEST indicates that a change manageme...; Question 37: A large bank has completed several acquisitions in the last ...; Question 38: Which of the following is the MOST appropriate mechanism for...; Question 39: The board of directors has mandated the use of geolocation s...; Question 40: When a shortfall of IT resources is identified, the FIRST co...; Question 41: The BEST way to ensure an IT steering committee meets enterp...; Question 42: Which of the following is the MOST important input for the d...; Question 43: An enterprise has had the same IT governance framework in pl...; Question 44: An enterprise has decided to create its first mobile applica...; Question 45: Which of the following is the MOST important attribute of an...; Question 46: Which of the following would be MOST useful for prioritizing...; Question 47: Which of the following is the MOST effective way for a CIO t...; Question 48: Once the strategic vision has been established, which of the...; Question 49: To enable IT to deliver adequate services and maintain avail...; Question 50: A large financial institution is considering outsourcing cus...; Question 51: Which of the following is MOST important for the effective d...; Question 52: Which of the following is the MOST important consideration f...; Question 53: An enterprise's internal audit group has scheduled a control...; Question 54: Of the following, who is responsible for the achievement of ...; Question 55: An enterprise plans to expand into new markets in countries ...; Question 56: An enterprise considering implementing IT governance should ...; Question 57: A newly appointed CIO has been tasked with the responsibilit...; Question 58: As part of the implementation of IT governance, the board of...; Question 59: An enterprise's decision to move to a virtualized architectu...; Question 60: The PRIMARY benefit of using an IT service catalog as part o...; Question 61: An organization requires updates to their IT infrastructure ...; Question 62: Which of the following is the PRIMARY benefit of communicati...; Question 63: When selecting a vendor to provide services associated with ...; Question 64: A board of directors wants to ensure the enterprise is respo...; Question 65: Which of the following is the BEST way for a CIO to ensure t...; Question 66: What should be an IT steering committee's FIRST course of ac...; Question 67: Which of the following is MOST important for an IT strategy ...; Question 68: Which of the following is the BEST way to address the risk a...; Question 69: Which of the following would be MOST important to update if ...; Question 70: When deciding to develop a system with sensitive data, which...; Question 71: A regulatory audit assessed an enterprise's main transaction...; Question 72: Which of the following is the BEST indication that enterpris...; Question 73: An enterprise is evaluating a Software as a Service (SaaS) s...; Question 74: Following a re-prioritization of business objectives by mana...; Question 75: The board of directors of an enterprise has approved a three...; Question 76: Which of the following MOST effectively prevents an IT syste...; Question 77: Which of the following is the MOST important reason that IT ...; Question 78: A board of directors is concerned that a major IT implementa...; Question 79: A large enterprise that is diversifying its business will be...; Question 80: The board of directors of an enterprise has questioned wheth...; Question 81: An enterprise plans to migrate its applications and data to ...; Question 82: Which of the following would BEST support an enterprise's in...; Question 83: An enterprise made a significant change to its business oper...; Question 84: An enterprise's global IT program management office (PMO) ha...; Question 85: A CEO determines the enterprise is lagging behind its compet...; Question 86: Before establishing IT key nsk indicators (KRls) which of th...; Question 87: The BEST time to identity metrics to measure the performance...; Question 88: Two large financial institutions with different corporate cu...; Question 89: An enterprise incurred penalties for noncompliance with priv...; Question 90: Which of the following would be an IT steering committee's B...; Question 91: Supply chain management has established a supplier policy re...; Question 92: Which of the following is the PRIMARY consideration for an e...; Question 93: A small enterprise has just hired its first CIO, who has bee...; Question 94: An enterprise is concerned that ongoing maintenance costs ar...; Question 95: An enterprise is developing several consumer-based services ...; Question 96: An enterprise's CIO requires all IT processes within the ent...; Question 97: Which of the following has PRIMARY responsibility to define ...; Question 98: Which of the following is the MOST important input for desig...; Question 99: An enterprise has identified a number of plausible risk scen...; Question 100: Which of the following is the BEST way to maximize the value...; Question 101: A large enterprise has been experiencing high turnover of sk...; Question 102: A major data leakage incident at an enterprise has resulted ...; Question 103: Which of the following characteristics would BEST indicate t...; Question 104: ACIO determines IT investment management processes are not f...; Question 105: An organization's board of directors has questioned the valu...; Question 106: An enterprise has learned of a new regulation that may impac...; Question 107: An enterprise has been focused on establishing an IT risk ma...; Question 108: When developing a framework to implement IT governance, whic...; Question 109: After shifting from lease to purchase of IT infrastructure a...; Question 110: An IT risk committee is trying to mitigate the risk associat...; Question 111: Which of the following BEST facilitates the standardization ...; Question 112: When establishing an enterprise data model, the BEST way to ...; Question 113: A global financial enterprise has been experiencing a substa...; Question 114: An enterprise recently implemented a significant change in i...; Question 115: Which of the following would be the MOST effective way to en...; Question 116: An enterprise has made the strategic decision to begin a glo...; Question 117: An IT strategy committee wants to evaluate how well the IT d...; Question 118: An enterprise's IT department has been operating independent...; Question 119: An enterprise has identified potential environmental disaste...; Question 120: An enterprise has established a new department to oversee th...; Question 121: An enterprise is conducting a SWOT analysis as part of IT st...; Question 122: The BEST way to decide how to prioritize issues identified i...; Question 123: Which of the following roles should be responsible for data ...; Question 124: A manufacturing company has recently decided to outsource po...; Question 125: An IT audit report indicates that a lack of IT employee risk...; Question 126: A board of directors has just received a report indicating t...; Question 127: An enterprise learns that a new privacy regulation was recen...; Question 128: An enterprise considers implementing a system that uses a te...; Question 129: A business case indicates an enterprise would reduce costs b...; Question 130: Which of the following would provide the BEST input for prio...; Question 131: An enterprise is exploring a new business opportunity. Which...; Question 132: Which of the following is the BEST course of action to enabl...; Question 133: Which of the following should be the PRIMARY consideration f...; Question 134: An IT strategy committee has reviewed an audit report indica...; Question 135: Which of the following should be considered FIRST when asses...; Question 136: A CIO is planning to interview enterprise stakeholders to as...; Question 137: Which of the following should be identified FIRST when deter...; Question 138: Which of the following is the PRIMARY ongoing responsibility...; Question 139: Prior to setting IT objectives, an enterprise MUST have esta...; Question 140: When assessing the impact of a new regulatory requirement, w...; Question 141: Facing financial struggles, a CEO mandated severe budget cut...; Question 142: A health tech enterprise wants to ensure that its in-house d...; Question 143: The IT department has determined that problems with a busine...; Question 144: An enterprise learns that some of its business divisions hav...; Question 145: Business management is seeking assurance from the CIO that c...; Question 146: Six months ago, an enterprise's CIO reorganized IT to improv...; Question 147: The CIO of an enterprise learns the payroll server of a comp...; Question 148: Which of the following BEST lowers costs and improves scalab...; Question 149: A financial institution with a highly regarded reputation fo...; Question 150: Which of the following should be the MAIN reason for an ente...; Question 151: The accountability for a business continuity program for bus...; Question 152: Which of the following MUST be established before implementi...; Question 153: Which of the following is the BEST way to ensure all enterpr...; Question 154: From an IT governance perspective, establishing performance ...; Question 155: What should be the FIRST action of a new CIO when considerin...; Question 156: An enterprise has made the strategic decision to reduce oper...; Question 157: Which of the following is the MOST significant challenge fac...; Question 158: An organization is evaluating vendors to provide mobile devi...; Question 159: Which of the following BEST supports an IT strategy committe...; Question 160: An IT value delivery framework PRIMARILY helps an enterprise...; Question 161: Establishing a uniform definition for likelihood and impact ...; Question 162: Of the following, who should be responsible for ensuring the...; Question 163: When implementing an IT governance framework, which of the f...; Question 164: Which of the following is MOST important for an enterprise t...; Question 165: To ensure IT risk is managed in a consistent manner, it is M...; Question 166: The CEO of a large enterprise has announced me commencement ...; Question 167: A new and expanding enterprise has recently received a repor...; Question 168: The CIO of a financial services company is tasked with ensur...; Question 169: To successfully implement enterprise IT governance, which of...; Question 170: Which of the following is the MOST effective means for IT ma...; Question 171: A business has outsourced IT operations to several third-par...; Question 172: It has been discovered that multiple business units across a...; Question 173: Which of the following should be the FIRST action taken by a...; Question 174: Which of the following IT governance practices would BEST su...; Question 175: Which of the following is MOST important to effectively init...; Question 176: The use of new technology in an enterprise will require spec...; Question 177: Which of the following is the MOST effective way of assessin...; Question 178: A business unit is planning to replace an existing IT legacy...; Question 179: Which of the following is PRIMARILY achieved through perform...; Question 180: A recent benchmarking analysis has indicated an IT organizat...; Question 181: An IT governance committee is defining a risk management pol...; Question 182: Which of the following is the BEST way to manage the risk as...; Question 183: Which of the following is necessary for effective risk manag...; Question 184: Who is PRIMARILY accountable for delivering the benefits of ...; Question 185: The PRIMARY objective of IT resource planning within an ente...; Question 186: An enterprise is concerned with the potential for data leaka...; Question 187: Which of the following should senior management do FIRST whe...; Question 188: Which of the following components of a policy BEST enables t...; Question 189: Which of the following is the BEST IT architecture concept t...; Question 190: A CIO has been asked to modify an organization's IT performa...; Question 191: A CIO believes that a recent mission-critical IT decision by...; Question 192: An IT governance committee realizes there are antiquated tec...; Question 193: An enterprise's board of directors is developing a strategy ...; Question 194: From a governance perspective, the PRIMARY goal of an IT ris...; Question 195: Which of the following is MOST important to include in the c...; Question 196: A strategic IT-enabled investment is failing due to unforese...; Question 197: When establishing a methodology for business cases, it would...; Question 198: An enterprise will be adopting wearable technology to improv...; Question 199: The MOST appropriate method for evaluating the capability of...; Question 200: To benefit from economies of scale, a CIO is deciding whethe...; Question 201: A CIO has recently been made aware of a new regulatory requi...; Question 202: Which of the following would be MOST useful in developing IT...; Question 203: Which of the following should IT governance mandate before a...; Question 204: A root-cause analysis indicates a major service disruption d...; Question 205: Which of the following is a responsibility of an IT strategy...; Question 206: Which of the following would be the BEST long-term solution ...; Question 207: Which of the following is the BEST method to monitor IT gove...; Question 208: Which of the following should be the PRIMARY input when deve...; Question 209: An enterprise recently approved a bring your own device (BYO...; Question 210: Which of the following are PRIMARY factors in ensuring the s...; Question 211: The MOST successful IT performance metrics are those that:...; Question 212: An enterprise has performed a business impact analysis (BIA)...; Question 213: Following the rollout of an enterprise IT software solution ...; Question 214: A rail transport company has the worst on-time arrival recor...; Question 215: Which of the following is the MOST important benefit of effe...; Question 216: An interna! health organization has been notified that a dat...; Question 217: An IT director has become aware that a certain subset of dat...; Question 218: Which of the following is the BEST method for making a strat...; Question 219: Which of the following would be the BEST way to facilitate t...; Question 220: An enterprise's board of directors has determined that IT is...; Question 221: Which of the following is the BEST way to ensure new systems...; Question 222: An enterprise is implementing its first mobile sales channel...; Question 223: A CIO wants to make improvements to the enterprise's IT gove...; Question 224: Which of the following is the BEST approach to assist an ent...; Question 225: Which of the following is the MOST efficient way for an IT t...; Question 226: An enterprise can BEST assess the benefits of a new IT proje...; Question 227: A CIO must determine if IT staff have adequate skills to del...; Question 228: The risk committee is overwhelmed by the number of false pos...; Question 229: Which of the following is the MOST effective way to manage r...; Question 230: IT security is concerned with employees' increasing use of p...; Question 231: An independent consultant has been hired to conduct an ad ho...; Question 232: Which of the following should be done FIRST when concerns ha...; Question 233: Which of the following is the BEST indicator of the effectiv...; Question 234: When developing an IT strategic plan that supports an enterp...; Question 235: Which of the following would BEST help to prevent an IT syst...; Question 236: IT has launched new portfolio management policies and proces...; Question 237: Which of the following should be the PRIMARY governance obje...; Question 238: Within a governance structure for risk management, which of ...; Question 239: A newly established IT steering committee is concerned about...; Question 240: An IT manager is trying to determine optimal IT service leve...; Question 241: What is the PRIMARY benefit of aligning information architec...; Question 242: The GREATEST benefit associated with a decision to implement...; Question 243: In a large enterprise, which of the following should be resp...; Question 244: An enterprise experiencing issues with data protection and l...; Question 245: Of the following, who is PRIMARILY responsible for applying ...; Question 246: An IT governance committee is reviewing its current risk man...; Question 247: Which of the following should be management's GREATEST consi...; Question 248: Which of the following is the MOST effective approach to ens...; Question 249: An enterprise is considering outsourcing non-core IT process...; Question 250: The CIO in a large enterprise is seeking assurance that sign...; Question 251: When conducting a risk assessment in support of a new regula...; Question 252: In which of the following situations is it MOST appropriate ...; Question 253: Which of the following are the MOST important processes for ...; Question 254: Which of the following is MOST likely to have a negative imp...

Question 125/254

LEAVE A REPLY

Download PDF File