Compliance, Ethics, and Culture CGEIT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why are business ethics relevant to IT governance decisions?

   • ABecause ethics are only relevant to financial decisions.
   • BBecause IT decisions can have significant impacts on stakeholders, including customers, employees, and society.
   • CBecause ethics are primarily a concern for external regulators.
   • DBecause ethical considerations are optional if the organization is legally compliant.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A publicly traded company is implementing SOX compliance. The IT governance team is responsible for ensuring that IT controls over financial reporting are effective. Which activity is a key requirement under SOX?

   • ADocumenting and testing the IT general controls (ITGCs) that support financial reporting processes.
   • BEnsuring that all financial data is stored in an immutable format.
   • CImplementing a data loss prevention system to protect all financial data.
   • DConducting an annual penetration test of the financial systems.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How can a strong compliance culture influence the effectiveness of GRC initiatives?

   • AIt guarantees that all compliance risks are automatically mitigated.
   • BIt eliminates the need for formal GRC processes.
   • CIt increases the likelihood that employees will proactively identify and report compliance issues.
   • DIt reduces the importance of leadership commitment to governance.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company's IT governance committee is updating its compliance risk assessment process. They want to ensure that ethical considerations are integrated into the process. Which addition to the process best achieves this?

   • AAdd a legal review step to ensure all decisions comply with applicable laws.
   • BRequire that all risk assessments be approved by the board of directors.
   • CUse a quantitative risk analysis model to prioritize risks based on financial impact.
   • DInclude an ethical impact assessment for high-risk compliance decisions.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Why is organizational culture important to IT governance?

   • ABecause culture determines the organization's legal structure.
   • BBecause culture is the only factor that determines IT security effectiveness.
   • CBecause culture replaces the need for formal governance policies.
   • DBecause culture influences whether employees follow governance processes and behave in a compliant manner.
   Reveal Solution Discussion Select an answer first