Alignment with Business Goals ACCISO Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A manufacturing company is planning to implement an industrial IoT system to improve production efficiency. The CISO identifies a risk that the system could be hacked, causing production downtime and safety incidents. The company has a low risk appetite and limited budget for security. What is the most appropriate risk response?

   • ATransfer the risk by purchasing cyber insurance to cover downtime costs.
   • BAvoid the risk by canceling the IoT project.
   • CAccept the risk because the efficiency gains outweigh the potential losses.
   • DImplement a defense-in-depth security architecture that includes network segmentation, access controls, and continuous monitoring, prioritized for critical assets.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A retail company is developing a three-year strategic plan. The IT department has proposed a major e-commerce platform upgrade. The marketing department wants to launch a new loyalty program within six months, which depends on the new platform. The CFO is concerned about the cost of the upgrade. What is the most effective way to integrate these competing priorities into the strategic plan?

   • ACancel the e-commerce upgrade and use a third-party loyalty platform to avoid the cost.
   • BApprove the e-commerce upgrade immediately to support the loyalty program launch.
   • CCreate a phased plan that sequences the e-commerce upgrade to support the loyalty program while phasing costs over multiple budget cycles.
   • DDelay the loyalty program until the e-commerce upgrade is fully funded and completed.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A hospital is implementing a new electronic health record (EHR) system. The CISO is conducting a stakeholder analysis to ensure alignment with the hospital's goal of improving patient care. Which stakeholder would be most important to include to ensure the EHR system actually improves clinical workflows?

   • AThe hospital's IT help desk staff.
   • BPhysicians and nurses who will use the EHR system daily.
   • CThe EHR vendor's sales representatives.
   • DThe hospital's legal counsel.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is using COBIT to govern its IT portfolio. The board wants to ensure that IT projects are not only completed on time but also deliver expected business benefits. Which COBIT process area should be emphasized?

   • ADeliver, Service, and Support (DSS) – to ensure IT services are operated efficiently.
   • BEvaluate, Direct, and Monitor (EDM) – to ensure governance objectives are met.
   • CAlign, Plan, and Organize (APO) – to ensure IT investments are planned and tracked for value delivery.
   • DMonitor, Evaluate, and Assess (MEA) – to assess the performance of IT systems.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of a risk that could hinder the achievement of business goals through IT?

   • AA change in the color scheme of the company website
   • BA scheduled maintenance window for email servers
   • CA cyberattack that disrupts critical business systems
   • DAn increase in the number of IT help desk tickets
   Reveal Solution Discussion Select an answer first