Isaca Updated CGEIT Exam Questions and Answers by aj

The best way to address the issue of duplicate purchases caused by different acquisition methods of business and IT is to establish a centralized procurement approval process. A centralized procurement approval process is a process that organizations use to obtain approval for purchases that they intend to make. The process typically involves several steps, such as identifying a need, requesting a quote, obtaining quotes, and obtaining approval from a designated authority. By centralizing the procurement approval process, the organization can avoid duplication, inconsistency, and inefficiency in purchasing decisions. A centralized procurement approval process can also help the organization to achieve the following benefits :

• Visibility and control: The organization can have a clear view of all purchase requests and transactions, and can monitor and manage the budgets, requesters, and suppliers.
• Better purchasing power: The organization can leverage its volume and history to negotiate better prices and discounts with vendors, and can establish long-term relationships with preferred suppliers.
• Standardization: The organization can implement and enforce policies and standards for data quality, security, privacy, and usage, and can create a single source of truth for purchasing information.
• Eliminates maverick spending: The organization can identify and prevent individual spending that goes against the purchasing policies or that results in duplicate or unnecessary purchases.

Therefore, establishing a centralized procurement approval process is the best way to address the issue of duplicate purchases caused by different acquisition methods of business and IT. References: Centralized vs. Decentralized Purchasing: Key Differences | Pipefy, Centralizing Procurement: What Companies Need to Consider, What is the Procurement Approval Process: Detailed Guide

 Assigning individuals responsibilities and accountabilities for management of risks is the most effective way to manage risks within the enterprise, as it ensures that the risk owners and stakeholders are clearly identified, involved, and accountable for the risk management activities and outcomes. Assigning responsibilities and accountabilities also helps to establish roles and expectations, delegate authority, and monitor performance and compliance12. References := CGEIT Exam Content Outline, Domain 4, Subtopic B: IT Risk Management, Task 2: Ensure that appropriate senior level management sponsorship for IT risk management exists.

Implementing a review and approval process for each phase would best help to improve an enterprise’s ability to manage large IT investment projects. This is because a review and approval process can help to ensure that the project is aligned with the business objectives, scope, budget, schedule, quality, and risk criteria at each stage of the project life cycle. A review and approval process can also help to monitor the project progress, performance, and deliverables, as well as identify and resolve any issues or changes that may arise. A review and approval process can also provide transparency, accountability, and governance for the project stakeholders and decision-makers.

Creating a change management board is not the best answer, as it is only one aspect of a review and approval process. A change management board is a group of people who are responsible for reviewing, approving, or rejecting change requests that affect the project scope, schedule, cost, or quality. A change management board is important for managing changes in a project, but it is not sufficient or comprehensive for managing large IT investment projects.

Reviewing and evaluating existing business cases is not the best answer, as it is only a preliminary step in a review and approval process. A business case is a document that provides the justification and rationale for initiating a project, based on the expected costs, benefits, risks, and value of the project. Reviewing and evaluating existing business cases can help to select and prioritize the most viable and valuable projects for the enterprise, but it is not enough or relevant for managing large IT investment projects.

Publishing the IT approval process online for wider scrutiny is not the best answer, as it is only a communication method for a review and approval process. Publishing the IT approval process online can help to increase the visibility, awareness, and understanding of the project requirements, criteria, and procedures among the project stakeholders and participants. Publishing the IT approval process online can also help to solicit feedback, suggestions, or concerns from the wider audience. However, publishing the IT approval process online does not necessarily improve the enterprise’s ability to manage large IT investment projects.

References := IT Portfolio Management Strategies | Smartsheet, Managing an IT portfolio requires four steps section. Best Practices in Project Management | Smartsheet, Establish ground rules for how the project will move forward section. Government of Canada project management - Canada.ca, These practices include establishing clear accountabilities section. IT Project Management: Concepts, Solutions & Best Practices, What is Integrated Project Management (IPM)? section. 16 Industry Experts Share Best Practices For IT Project Management - Forbes, 1. Limit Work In Progress section.

A business impact analysis (BIA) is a process of predicting the organizational and financial impact of business disruptions, such as vendor system failures. A BIA can help the CIO to prepare for this concern by identifying the critical business processes, the potential effects of disruption, and the recovery requirements and strategies. A BIA can also help the CIO to prioritize the resources and actions needed to restore the normal operations as quickly as possible1. A BIA is an essential component of business continuity planning (BCP) and disaster recovery planning (DRP)2.

An IT balanced scorecard is a tool that measures and monitors the performance of IT in relation to the strategic goals and objectives of the organization. An IT balanced scorecard can help the CIO to evaluate the effectiveness and efficiency of IT, but it does not address the impact of business disruptions or the recovery plans.

Service-level metrics are indicators that measure and report the quality and availability of IT services delivered to the customers or users. Service-level metrics can help the CIO to track and improve the service delivery, but they do not assess the impact of business disruptions or the recovery plans.

An IT procurement policy is a document that defines the rules and procedures for acquiring IT products and services from external vendors. An IT procurement policy can help the CIO to manage the vendor relationships, contracts, and risks, but it does not analyze the impact of business disruptions or the recovery plans. References: How To Conduct Business Impact Analysis in 8 Easy Steps. The Top 10 Vendor Risks & How to Manage Them. What is FMEA? Failure Mode & Effects Analysis. Definition of Business Impact Analysis (BIA). [IT Balanced Scorecard: Definition, Frameworks, Examples]. [Service Level Metrics: Definition, Types, Examples]. [IT Procurement Policy: Definition, Components, Examples].