Isaca Certification CGEIT Isaca Study Notes

 Enterprise architecture (EA) is the most important thing to review in this situation, as it provides a holistic view of the current and desired state of the IT applications, data, and infrastructure, as well as the business processes, capabilities, and goals that they support. EA can help identify the redundant IT applications, the data sources and dependencies, the integration requirements and challenges, and the alignment with the strategic initiative of providing integrated services to customers. EA can also help define the roadmap, standards, and governance for achieving the desired state of IT integration.

IT risk register, balanced scorecard measures, and IT strategic plan are also important things to review, but they are not as essential as EA in this situation. IT risk register is a document that records the IT risks that may affect the enterprise’s objectives and operations, as well as their likelihood, impact, mitigation strategies, and status. IT risk register can help identify and manage the potential risks associated with IT integration, such as data quality, security, compatibility, performance, and compliance issues. Balanced scorecard measures are a set of metrics that track the performance of IT in relation to the enterprise’s vision, strategy, and goals. Balanced scorecard measures can help evaluate the effectiveness and efficiency of IT integration, as well as its contribution to customer satisfaction, business value, and innovation. IT strategic plan is a document that outlines the vision, mission, objectives, initiatives, and actions of IT to support the enterprise’s strategy and goals. IT strategic plan can help align IT integration with the business needs and expectations, as well as allocate the necessary resources and budget for it.

References := Enterprise Architecture Governance - CIO Wiki; Enterprise Architecture Governance | The Definitive Guide | LeanIX; Enterprise Architecture Governance – Why It Is Important (Part 2); What is IT governance? A formal way to align IT & business strategy.

 Change control procedures are a set of steps that ensure that any changes to a system, product, project, or document are authorized, documented, and tracked. Change control procedures help to maintain the quality, integrity, and security of the system or product, as well as to comply with relevant standards and regulations. By enforcing change control procedures, the enterprise can prevent unauthorized or undocumented updates that could compromise the functionality, performance, or reliability of the applications. References :=

What is a change control procedure? With benefits and steps

What is a change control process? Steps and template

Change Control | Risk Management & Audit Services - Harvard University

Architecture and design reviews are an effective way to ensure that IT solutions are aligned with the business requirements and objectives for specific business processes. By involving the business process stakeholders in these reviews, IT can gain a better understanding of the business needs, expectations, and constraints, as well as receive feedback and validation from the end users. This can help to avoid miscommunication, gaps, or conflicts between IT and business, and ensure that the IT capabilities are fit for purpose and deliver value to the business. References := CGEIT Review Manual, 27th Edition, Domain 1: Governance of Enterprise IT, page 20-21.

 A balanced scorecard is a tool that a CIO would use to present the overall view of IT performance to the board of directors, because it is a framework that translates the enterprise’s vision and strategy into a set of performance measures that cover four perspectives: financial, customer, internal business process, and learning and growth12. A balanced scorecard can help to communicate and monitor the IT strategy and goals, and align the IT activities and resources with the business needs and expectations. A balanced scorecard can also provide a balanced and comprehensive view of the IT performance and value delivery, and highlight the strengths, weaknesses, opportunities, and threats for improvement12. References := ISACA, CGEIT Review Manual, 7th Edition, 2019, page 43-44.