IT Governance and Strategy CISA Practice Questions (Page 7)

Questions 31–32

1. 31foundation · easy

   Which of the following is a key outcome of effective IT governance and business alignment?

   • AIT operates independently from business units
   • BIT budgets are always reduced
   • CAll IT projects are completed on time
   • DIT resources are used to create business value
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A global bank is subject to the General Data Protection Regulation (GDPR) because it processes personal data of EU citizens. The bank is planning to transfer customer data to a third-party processor located in a country not recognized as having adequate data protection. What is the MOST appropriate governance action?

   • AProhibit the transfer entirely because the country is not recognized as adequate.
   • BEnsure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place before the transfer.
   • CObtain consent from each data subject for the transfer.
   • DTransfer the data without any additional measures because the bank is compliant with GDPR.
   Reveal Solution Discussion Select an answer first