Test your basic knowledge |

CGEIT: Certified In The Governance Of Enterprise It

Subjects : certifications, cgeit, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Procedure for Governance Compliance Review
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
plan-prepare-execute-track-report
iter (interview - test analysis - detecting / hold / summarize - Discuss with auditee
who should do what? - establishing accountability - VR / goals objectives - GL translate strategy into action (automation - cost - risk mgmt)

2. Risk analysis techniques
Threat analysis - vulnerability assessment - gap analysis - (positive and negative / opportunities and threats)
5 gov processes (GL - PR) - std (users realize - risks opt opt ress) and framework - stakeholder transparency create - it gov: provide direction - evaluate performance - it Mgmnt: translate strategy into direction - and report performance mesure - 32
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener

3. Types of assertions
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
VR level - integration and business strategy it - Chaired by a business executive / board member
Signature - statement - audit trail
Benefits realization - risk optimization - resource optimization

4. COBIT cascading goals
Saving the cost of damage (eg ALE) minus cost of mitigation
Observations / findings - risks - recommendation / report
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
plan-prepare-execute-track-report

5. Risk treatment process
Define risk owners (possibly delegate to process owners) - avoid the formation - reduction - sharing - acceptance - cost benefit measures to keep the residual risk within defined tolerance limits
5 gov processes (GL - PR) - std (users realize - risks opt opt ress) and framework - stakeholder transparency create - it gov: provide direction - evaluate performance - it Mgmnt: translate strategy into direction - and report performance mesure - 32
risk that the controls are inadequate
Signature - statement - audit trail

6. The report stage of a review
Observations / findings - risks - recommendation / report
a technique for analysis and presentation of responsibilities - the name is derived from the initial letters of the words Responsible - Accountable - Consulted and Informed.
pain points - improvment opportunities
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o

7. COBIT enabler guides
plan-prepare-execute-track-report
implementation - information security - assurance - Risk
Threat analysis - vulnerability assessment - gap analysis - (positive and negative / opportunities and threats)
only known processes enabling

8. KPI
Used in business administration figures - references which can be the progress or the level of compliance with regard to important objectives or critical success factors measured within an organization and / or calculated - Important KPIs in the serv
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
COBIT provides the means of risk management - Riskit provides the ends.
5 gov processes (GL - PR) - std (users realize - risks opt opt ress) and framework - stakeholder transparency create - it gov: provide direction - evaluate performance - it Mgmnt: translate strategy into direction - and report performance mesure - 32

9. Refine the innovation process management
Benefits realization - risk optimization - resource optimization
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities

10. Riskit vs. COBIT
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
COBIT provides the means of risk management - Riskit provides the ends.
Signature - statement - audit trail
unavoidable risk

11. Function point analysis
QA
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
operational risk (HR - Law - Nature - IT) - reputational risk
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o

12. Inherent risk
plan: align - plan - Organize (PO) - build: build - Aquire - Implement (AI) - run: Deliver - servie - Support (DS) - Monitor: Monitor - Evaluate - control ME
unavoidable risk
Benefits realization - risk optimization - resource optimization
basic ingredients - basic principles - enterprise enablers - goals cascade - maturity model

13. Methods for continuous process improvement
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
Encourages the identification of a few relevant high-level financial measures. In Particular - designers were encouraged to choose measures that helped inform the answer to the question 'How do we look to shareholders?'
Define risk owners (possibly delegate to process owners) - avoid the formation - reduction - sharing - acceptance - cost benefit measures to keep the residual risk within defined tolerance limits
risk and risk response evaluation

14. Audit risk consists of...
Define risk owners (possibly delegate to process owners) - avoid the formation - reduction - sharing - acceptance - cost benefit measures to keep the residual risk within defined tolerance limits
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin

15. Anual loss expectancy ALE
Signature - statement - audit trail
QA
quantitative risk analysis approach - damage cost per year * enter frequency
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi

16. ISO 31000
5 gov processes (GL - PR) - std (users realize - risks opt opt ress) and framework - stakeholder transparency create - it gov: provide direction - evaluate performance - it Mgmnt: translate strategy into direction - and report performance mesure - 32
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '
iter (interview - test analysis - detecting / hold / summarize - Discuss with auditee
enterprise risk management

17. Detection risk
risk that something will NOT be revealed - ill-prepared - not tested properly - misinterpreted findings weighted wrong
VR level - integration and business strategy it - Chaired by a business executive / board member
operational risk (HR - Law - Nature - IT) - reputational risk
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going

18. Value management
who should do what? - establishing accountability - VR / goals objectives - GL translate strategy into action (automation - cost - risk mgmt)
risk that the controls are inadequate
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p

19. Best practices in dealing with policies Policies (not principles)
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation
To take the residual risk a company is willing risk
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p

20. A widely used definition of operational risk is the one contained in the Basel II [1] regulations. This definition states that operational risk is the risk of loss resulting from ____________ - people and systems - or from external events.
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
pain points - improvment opportunities
inadequate or failed internal processes

21. To address three types of risk in the ICS
critical success factors
who should do what? - establishing accountability - VR / goals objectives - GL translate strategy into action (automation - cost - risk mgmt)
enterprise risk management
Financial - Operational - Reputation

22. COBIT framework
Used in business administration figures - references which can be the progress or the level of compliance with regard to important objectives or critical success factors measured within an organization and / or calculated - Important KPIs in the serv
COBIT provides the means of risk management - Riskit provides the ends.
basic ingredients - basic principles - enterprise enablers - goals cascade - maturity model
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '

23. ISO 27000
only known processes enabling
informations inherited
risk that something will NOT be revealed - ill-prepared - not tested properly - misinterpreted findings weighted wrong
processes are assets that create value for the customer

24. Balanced scorecard - Financial

25. IT Governance and COBIT
Threat analysis - vulnerability assessment - gap analysis - (positive and negative / opportunities and threats)
Trust Service Contracts
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
5 gov processes (GL - PR) - std (users realize - risks opt opt ress) and framework - stakeholder transparency create - it gov: provide direction - evaluate performance - it Mgmnt: translate strategy into direction - and report performance mesure - 32

26. Comprehensive audits
The identification of measures that answer the question 'What must we excel at?'
Tests - Extensive testing
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
policy - principles - statements

27. IT Steering Committee
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
executive tasks: prioritization - resource alloc - project tracking
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities

28. Balanced scorecard - Internal Business Processes

29. Use of balanced scorecards
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities
QA
inadequate or failed internal processes
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener

30. Risk analysis methodology
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
Scenarios set in a risk environment
risk and risk response evaluation
To take the residual risk a company is willing risk

31. COBIT professional guides
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
informations inherited
Scenarios set in a risk environment
implementation - information security - assurance - Risk

32. 3 Governance Objectives
Benefits realization - risk optimization - resource optimization
processes are assets that create value for the customer
executive tasks: prioritization - resource alloc - project tracking
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals

33. Hierarchy of policies
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
processes are assets that create value for the customer
a technique for analysis and presentation of responsibilities - the name is derived from the initial letters of the words Responsible - Accountable - Consulted and Informed.
policy - principles - statements

34. 5 focus area of IT Governance
risk that something will NOT be revealed - ill-prepared - not tested properly - misinterpreted findings weighted wrong
stratecic establish alignment / framework - value delivery - risk management - resource mgmt - performance mgmt / stakeholer transparency
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener

35. CSFs
who should do what? - establishing accountability - VR / goals objectives - GL translate strategy into action (automation - cost - risk mgmt)
Tests - Extensive testing
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
critical success factors

36. IT Strategy Committee
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o
implementation - information security - assurance - Risk
Benefits realization - risk optimization - resource optimization
VR level - integration and business strategy it - Chaired by a business executive / board member

37. IT governance life cycle
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going
inadequate or failed internal processes
pain points - improvment opportunities
Financial - Operational - Reputation

38. Balanced scorecard (BSC)
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance
inadequate or failed internal processes
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
Observations / findings - risks - recommendation / report

39. risk governance
The identification of measures that answer the question 'What must we excel at?'
iter (interview - test analysis - detecting / hold / summarize - Discuss with auditee
risk and risk response evaluation
stratecic establish alignment / framework - value delivery - risk management - resource mgmt - performance mgmt / stakeholer transparency

40. The 3 themes of the ICS economic / financial risk
processes are assets that create value for the customer
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
operational risk (HR - Law - Nature - IT) - reputational risk
risk that the controls are inadequate

41. Derivation Cobit practices / control objectives
risk and risk response evaluation
(hierarchy) 5 domains (EDM - po ad ds me) - processes 37 - 211 practices
Tests - Extensive testing
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going

42. Raci carts (RACI)
Financial - Operational - Reputation
a technique for analysis and presentation of responsibilities - the name is derived from the initial letters of the words Responsible - Accountable - Consulted and Informed.
5 gov processes (GL - PR) - std (users realize - risks opt opt ress) and framework - stakeholder transparency create - it gov: provide direction - evaluate performance - it Mgmnt: translate strategy into direction - and report performance mesure - 32
Signature - statement - audit trail

43. ISO 9000
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
Scenarios set in a risk environment
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi

44. Balanced scorecard - Learning and Growt

45. Entity level controls
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
operational risk (HR - Law - Nature - IT) - reputational risk
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener

46. Three different control categories?
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities
inadequate or failed internal processes
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
Saving the cost of damage (eg ALE) minus cost of mitigation

47. Valit content framework
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going
extract optimal value from investments it - value management: processes - monitor - portfolio management: funds - human - investment management: business case - Manging program / projects
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
who should do what? - establishing accountability - VR / goals objectives - GL translate strategy into action (automation - cost - risk mgmt)

48. Return on security investment ROSI
Benefits realization - risk optimization - resource optimization
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
Saving the cost of damage (eg ALE) minus cost of mitigation
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .

49. Structure of the 32 COBIT processes mgmt.
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
(hierarchy) 5 domains (EDM - po ad ds me) - processes 37 - 211 practices
plan: align - plan - Organize (PO) - build: build - Aquire - Implement (AI) - run: Deliver - servie - Support (DS) - Monitor: Monitor - Evaluate - control ME
Encourages the identification of a few relevant high-level financial measures. In Particular - designers were encouraged to choose measures that helped inform the answer to the question 'How do we look to shareholders?'

50. Control self assessment Self-assessment (kd) or a Control Self Assessment (CSA supervised self-assessment
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '