Which TOGAF component describes the method for developing architecture?
The ADM is TOGAF's iterative method for developing architecture.
← CGEIT pathway
Try CGEIT free
15 flashcards and 10 practice questions, with every answer explained, exactly as members see them. No account needed.
Flashcards 15 of 160
That is the free sample.
Associate membership gives you 100 cards for this exam, and every other exam in the catalogue.
Become an Associate Member to continue1 of 15
Practice questions 10 of 124
What is a key consideration when insourcing a previously outsourced service?
Bringing a service back in house means rebuilding the skills, staff, processes and knowledge the provider held, usually through a planned transition with knowledge transfer under the contract's exit provisions. The provider's reaction is a relationship matter, not a key consideration. Keeping the provider's tools may or may not fit, and customer communication matters less than having the capability to run the service.
When should benefits of an IT investment be measured?
Benefits often arrive after go-live and must be tracked over time.
Which is the BEST response when an IT risk exceeds appetite?
Risks beyond appetite need treatment or a documented decision at the right level.
What does a governance system in COBIT 2019 consist of?
A COBIT 2019 governance system is built from seven types of components: processes; organizational structures; principles, policies and procedures; information; culture, ethics and behavior; people, skills and competencies; and services, infrastructure and applications. Policies and procedures are only one component type. The IT department and its tools, or board committees alone, are parts of the system rather than the whole.
How should IT training investments be prioritized?
Training investment should close the skill gaps that matter most for the IT strategy, found by comparing current and required capabilities, as in COBIT APO07. Popular requests may not match strategic needs. Low cost per hour and free vendor courses can be useful sources, but they should not set priorities.
How often should the IT investment portfolio be reviewed?
Regular and event-driven reviews keep the portfolio aligned.
What does a risk profile describe?
In COBIT and ISACA's Risk IT guidance, the risk profile is an overall view of the risks the enterprise currently faces, their levels and trends, which is compared with risk appetite. Board members' preferences inform appetite, not the profile. A control inventory and audit findings affect risk levels but do not describe the enterprise's exposure.
How should legal and regulatory requirements be handled in IT governance?
COBIT MEA03 (Managed compliance with external requirements) calls for identifying applicable laws, regulations and contracts, assigning owners, and monitoring and reporting compliance. Legal teams interpret obligations, but IT must implement and evidence many of them. Waiting for audit findings is reactive, and passing requirements to vendors does not transfer accountability.
Which is the MAIN risk of outsourcing a critical IT service?
Accountability cannot be outsourced; loss of capability and control is the key risk.
0 of 10