Isaca Certification Changed CGEIT Questions

IT portfolio performance metrics must reflect the value delivered to the business, making business unit stakeholders’ input critical. The CGEIT Review Manual 8th Edition emphasizes that business stakeholders are the primary source for defining metrics that align with business objectives.

Extract from CGEIT Review Manual 8th Edition (Domain 5: Benefits Realization):"When establishing metrics to monitor IT portfolio performance, the input of business unit stakeholders is most important, as they define the business objectives and value expectations that the IT portfolio must deliver." (Approximate reference: Domain 5, Section on Performance Metrics)

Considering the input of business unit stakeholders (option D) ensures that metrics measure outcomes that matter to the business, such as revenue growth, customer satisfaction, or operational efficiency.

Why not the other options?

A. Project management office (PMO): The PMO focuses on project execution, not business value definition.

B. IT executives: IT executives provide technical input, but business stakeholders define value.

C. The chief executive officer (CEO): The CEO may set high-level goals, but business units provide detailed requirements.

Demonstrating adequate strategic oversight of IT by the board involves providing transparent, formal, and authoritative evidence to stakeholders, particularly for a publicly traded enterprise. The CGEIT Review Manual 8th Edition highlights that IT governance reporting in official documents, such as the annual report, is a key mechanism to communicate the board’s oversight role to shareholders, regulators, and other stakeholders.

Extract from CGEIT Review Manual 8th Edition (Domain 1: Governance of Enterprise IT):"The board of directors is responsible for ensuring that IT governance is aligned with enterprise objectives and that oversight is transparent to stakeholders. Including IT governance reporting in the annual report provides a formal mechanism to demonstrate accountability, strategic alignment, and oversight to shareholders and regulatory bodies." (Approximate reference: Domain 1, Section on Governance Framework and Reporting)

Including IT governance reporting in the annual report (option C) directly addresses the need to demonstrate board oversight in a formal, public, and credible manner, as it reaches shareholders and regulators who expect such disclosures in official financial and governance documents.

Why not the other options?

A. Annual IT governance communication to all staff: Internal communication to staff is important for alignment but does not directly demonstrate board oversight to external stakeholders like investors or regulators.

B. Press releases targeted at large investors: Press releases are informal and may lack the credibility and permanence of an annual report. They are not a standard mechanism for governance reporting.

D. Annual presentation of IT performance metrics: While performance metrics are useful, a presentation is typically internal or limited in scope and does not provide the formal, public disclosure required to demonstrate board oversight.

The best way to address the issue of IT staff not keeping their skills current, despite an adequate training budget, is to establish an agreed-upon skills development plan with each employee. This personalized approach ensures that training and development activities are directly aligned with both the organization's needs and the individual's career goals, thereby increasing the likelihood of participation and the application of new skills. While providing incentives and creating centers of excellence can be supportive, a tailored development plan directly engages each staff member in their growth, ensuring relevance and commitment.

Information architecture is the design and organization of data and information assets in an enterprise, such as databases, documents, metadata, and taxonomies. Enterprise architecture (EA) is the holistic view and planning of the business strategy, processes, systems, and technology in an enterprise, such as business architecture, application architecture, data architecture, and technology architecture1. Aligning information architecture with EA means ensuring that the data and information assets are consistent, coherent, and supportive of the EA goals and objectives2.

The primary benefit of aligning information architecture with EA is that it enables the tracing of data to business functions, which means that the data can be linked to the business processes, activities, roles, and outcomes that use or produce it. This benefit has several advantages for the enterprise, such as34:

Improving data quality, accuracy, and reliability by identifying and resolving any data issues or gaps in the business functions

Enhancing data governance, security, and compliance by defining and enforcing the data policies and standards for the business functions

Increasing data value, usability, and accessibility by providing the data consumers with relevant and timely data for their business functions

Supporting data-driven decision making and innovation by enabling the analysis and evaluation of data for the business functions

The other options are not the primary benefit of aligning information architecture with EA, but rather secondary or potential benefits. Improving communication with senior management and the business is a benefit of EA in general, but not specific to information architecture alignment. Ensuring the adoption of enterprise data quality standards is a benefit of data governance, which may be facilitated by information architecture alignment, but not guaranteed. Facilitating appropriate access to data consumers is a benefit of data security and privacy, which may be improved by information architecture alignment, but not directly.