A project team is implementing a new ERP system. During a risk workshop, they identify that the vendor may not deliver the integration module on time. The project manager has limited budget for mitigation. What is the MOST appropriate risk response strategy?

Develop a contingency plan that includes an alternative integration approach and trigger criteria for activating it

Transfer the risk to the end users by asking them to perform the integration manually

Immediately terminate the vendor contract and find a new vendor

Accept the risk and take no action because the budget is limited

What is the primary goal of project portfolio management?

To manage the day-to-day activities of individual projects

To ensure all projects are completed on time

To eliminate all risks from the portfolio

To select and prioritize projects that best align with strategic objectives and optimize resource allocation

What is the primary purpose of status reporting in project monitoring?

To guarantee the project will be completed on time

To replace the need for project meetings

To eliminate the need for risk management

To communicate project progress and issues to stakeholders

What is the primary role of a change control board (CCB) in project management?

To identify potential risks in the project

To review and approve or reject proposed changes to the project

To implement approved changes in the project

An organization is outsourcing the development of a customer-facing application to a third-party vendor. The project must comply with internal security policies and industry regulations. What is the MOST effective way for project governance to ensure compliance?

Include compliance requirements in the vendor contract and conduct regular audits of the vendor's processes and deliverables

Ask the vendor to sign a document stating they will comply with all regulations

Wait until the final deliverable is submitted to check for compliance

Rely on the vendor's certification as proof of compliance without further oversight

Certified Information Systems Auditor

Domain 3Objective 1

Project Governance and Management CISA Practice Questions (Page 6)

Part of the Information Systems Acquisition, Development and Implementation domain, which accounts for 12% of the CISA exam.

54questions here

11free pages

18concepts

12%of the exam

18 Concepts in This Objective

Project Governance Frameworks
Project Management Methodologies
Project Organizational Structures
Roles and Responsibilities in Projects
Project Initiation and Charter
Project Planning and Scheduling
Project Scope Management
Project Risk Management
Project Quality Management
Project Communication Management
Project Monitoring and Control
Project Change Management
Project Closure and Post-Implementation Review
Project Governance and Compliance
Benefits Realization Management
Project Portfolio Management
Agile and Adaptive Governance
Vendor and Contract Management in Projects

Questions 26–30

26application · medium
A project team is implementing a new ERP system. During a risk workshop, they identify that the vendor may not deliver the integration module on time. The project manager has limited budget for mitigation. What is the MOST appropriate risk response strategy?
Select an answer first
27foundation · easy
What is the primary goal of project portfolio management?
Select an answer first
28foundation · easy
What is the primary purpose of status reporting in project monitoring?
Select an answer first
29foundation · easy
What is the primary role of a change control board (CCB) in project management?
Select an answer first
30application · medium
An organization is outsourcing the development of a customer-facing application to a third-party vendor. The project must comply with internal security policies and industry regulations. What is the MOST effective way for project governance to ensure compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISACA. “CISA” is a trademark of its owner, used for identification only.