Isaca Updated CGEIT Exam Questions and Answers by rome

 Enterprise architecture (EA) is the most important thing to review in this situation, as it provides a holistic view of the current and desired state of the IT applications, data, and infrastructure, as well as the business processes, capabilities, and goals that they support. EA can help identify the redundant IT applications, the data sources and dependencies, the integration requirements and challenges, and the alignment with the strategic initiative of providing integrated services to customers. EA can also help define the roadmap, standards, and governance for achieving the desired state of IT integration.

IT risk register, balanced scorecard measures, and IT strategic plan are also important things to review, but they are not as essential as EA in this situation. IT risk register is a document that records the IT risks that may affect the enterprise’s objectives and operations, as well as their likelihood, impact, mitigation strategies, and status. IT risk register can help identify and manage the potential risks associated with IT integration, such as data quality, security, compatibility, performance, and compliance issues. Balanced scorecard measures are a set of metrics that track the performance of IT in relation to the enterprise’s vision, strategy, and goals. Balanced scorecard measures can help evaluate the effectiveness and efficiency of IT integration, as well as its contribution to customer satisfaction, business value, and innovation. IT strategic plan is a document that outlines the vision, mission, objectives, initiatives, and actions of IT to support the enterprise’s strategy and goals. IT strategic plan can help align IT integration with the business needs and expectations, as well as allocate the necessary resources and budget for it.

References := Enterprise Architecture Governance - CIO Wiki; Enterprise Architecture Governance | The Definitive Guide | LeanIX; Enterprise Architecture Governance – Why It Is Important (Part 2); What is IT governance? A formal way to align IT & business strategy.

An enterprise that wishes to establish key risk indicators (KRIs) in an effort to better manage IT risk should first identify the enterprise risk appetite, because this would help to define the level of risk that the enterprise is willing and able to accept in pursuit of its objectives and value creation. The enterprise risk appetite should consider the external and internal factors that influence the IT environment, such as market trends, customer demands, innovation opportunities, regulatory requirements, and business strategies12. The KRIs should align with the enterprise risk appetite, and measure the potential impact and likelihood of the risks that may affect the IT performance and outcomes12. References := ISACA, CGEIT Review Manual, 7th Edition, 2019, page 75-76.

Business ethics is the study of appropriate business policies and practices regarding potentially controversial subjects, such as corporate governance, insider trading, bribery, discrimination, corporate social responsibility, fiduciary responsibilities, and much more1. The most important aspect of business ethics is to protect the interests of the stakeholders, who are the individuals or groups that have a stake in the success or failure of a business. Stakeholders include shareholders, customers, employees, suppliers, regulators, and the society at large. By protecting stakeholders’ interests, a business can ensure its long-term viability, reputation, and profitability. References: CGEIT Review Manual (Digital Version) or CGEIT Review Manual (Print Version), Chapter 1: Governance of Enterprise IT, Section 1.1: IT Governance Frameworks and Principles, Subsection 1.1.2: IT Governance Principles, Page 14-15. Business Ethics: Definition, Principles, Why They’re Important.

 According to the CGEIT exam guide, IT resource management is the process of planning, acquiring, allocating, monitoring and optimizing the IT resources of an enterprise to support its strategy, objectives and goals. To evaluate IT resource management, it is most important to define the applicable key goals that the IT resources are expected to achieve or contribute to. These key goals should be aligned with the enterprise’s vision, mission and values, as well as the stakeholder needs and expectations. The key goals should also be specific, measurable, achievable, relevant and time-bound (SMART), and should be communicated and agreed upon by all relevant parties. Defining the applicable key goals will help to assess the performance, value and impact of IT resource management, as well as to identify the gaps, issues and opportunities for improvement. The other options are not as important as defining the applicable key goals, as they are more related to the implementation and execution of IT resource management, rather than its evaluation. References: CGEIT Exam Candidate Guide, page 14. CGEIT Certification, IT Resource Management