Test your basic knowledge |

CGEIT: Certified In The Governance Of Enterprise It

Subjects : certifications, cgeit, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. IT governance life cycle
Used in business administration figures - references which can be the progress or the level of compliance with regard to important objectives or critical success factors measured within an organization and / or calculated - Important KPIs in the serv
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going
who should do what? - establishing accountability - VR / goals objectives - GL translate strategy into action (automation - cost - risk mgmt)
plan: align - plan - Organize (PO) - build: build - Aquire - Implement (AI) - run: Deliver - servie - Support (DS) - Monitor: Monitor - Evaluate - control ME

2. Hierarchy of policies
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
policy - principles - statements
risk that the controls are inadequate
executive tasks: prioritization - resource alloc - project tracking

3. IT Governance and COBIT
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
5 gov processes (GL - PR) - std (users realize - risks opt opt ress) and framework - stakeholder transparency create - it gov: provide direction - evaluate performance - it Mgmnt: translate strategy into direction - and report performance mesure - 32
VR level - integration and business strategy it - Chaired by a business executive / board member
implementation - information security - assurance - Risk

4. Audit risk consists of...
Saving the cost of damage (eg ALE) minus cost of mitigation
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '

5. Balanced scorecard - Learning and Growt

6. Comprehensive audits
only known processes enabling
Tests - Extensive testing
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance
stratecic establish alignment / framework - value delivery - risk management - resource mgmt - performance mgmt / stakeholer transparency

7. Use of balanced scorecards
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
The identification of measures that answer the question 'What must we excel at?'
Scenarios set in a risk environment
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities

8. ISO 9000
Scenarios set in a risk environment
who should do what? - establishing accountability - VR / goals objectives - GL translate strategy into action (automation - cost - risk mgmt)
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
informations inherited

9. A widely used definition of operational risk is the one contained in the Basel II [1] regulations. This definition states that operational risk is the risk of loss resulting from ____________ - people and systems - or from external events.
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p
(hierarchy) 5 domains (EDM - po ad ds me) - processes 37 - 211 practices
risk and risk response evaluation
inadequate or failed internal processes

10. Control risk
risk that the controls are inadequate
VR level - integration and business strategy it - Chaired by a business executive / board member
critical success factors
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o

11. Key principle of BPM
To take the residual risk a company is willing risk
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p
processes are assets that create value for the customer
policy - principles - statements

12. application vs. controls. IT general controls
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation
Observations / findings - risks - recommendation / report
Benefits realization - risk optimization - resource optimization
executive tasks: prioritization - resource alloc - project tracking

13. Valit content framework
Signature - statement - audit trail
extract optimal value from investments it - value management: processes - monitor - portfolio management: funds - human - investment management: business case - Manging program / projects
Financial - Operational - Reputation
policy - principles - statements

14. IT Steering Committee
risk and risk response evaluation
Observations / findings - risks - recommendation / report
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities
executive tasks: prioritization - resource alloc - project tracking

15. Structure of the 32 COBIT processes mgmt.
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance
Encourages the identification of measures that answer the question 'How do customers see us?'
informations inherited
plan: align - plan - Organize (PO) - build: build - Aquire - Implement (AI) - run: Deliver - servie - Support (DS) - Monitor: Monitor - Evaluate - control ME

16. ISO 31000
COBIT provides the means of risk management - Riskit provides the ends.
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going
enterprise risk management
Encourages the identification of a few relevant high-level financial measures. In Particular - designers were encouraged to choose measures that helped inform the answer to the question 'How do we look to shareholders?'

17. IT Strategy Committee
VR level - integration and business strategy it - Chaired by a business executive / board member
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
a technique for analysis and presentation of responsibilities - the name is derived from the initial letters of the words Responsible - Accountable - Consulted and Informed.
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals

18. Best practices in dealing with policies Policies (not principles)
risk that something will NOT be revealed - ill-prepared - not tested properly - misinterpreted findings weighted wrong
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance
QA
Used in business administration figures - references which can be the progress or the level of compliance with regard to important objectives or critical success factors measured within an organization and / or calculated - Important KPIs in the serv

19. Refine the innovation process management
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance

20. benefit management (Profit organization realization)
The identification of measures that answer the question 'What must we excel at?'
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised

21. The implementation phase of a (Gov. Compliance) Review
processes are assets that create value for the customer
basic ingredients - basic principles - enterprise enablers - goals cascade - maturity model
iter (interview - test analysis - detecting / hold / summarize - Discuss with auditee
critical success factors

22. ISO 9000
risk that the controls are inadequate
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o
QA

23. Balanced scorecard - Internal Business Processes

24. Control self assessment Self-assessment (kd) or a Control Self Assessment (CSA supervised self-assessment
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
VR level - integration and business strategy it - Chaired by a business executive / board member
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities

25. COBIT cascading goals
QA
Benefits realization - risk optimization - resource optimization
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals

26. COBIT framework
VR level - integration and business strategy it - Chaired by a business executive / board member
informations inherited
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
basic ingredients - basic principles - enterprise enablers - goals cascade - maturity model

27. Risk analysis methodology
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin
unavoidable risk
Scenarios set in a risk environment
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation

28. ISO 27000
informations inherited
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication
policy - principles - statements
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI

29. Operational risk is...

30. Risk analysis techniques
plan-prepare-execute-track-report
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication
Threat analysis - vulnerability assessment - gap analysis - (positive and negative / opportunities and threats)
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI

31. Riskit vs. COBIT
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication
COBIT provides the means of risk management - Riskit provides the ends.
quantitative risk analysis approach - damage cost per year * enter frequency

32. Procedure for Governance Compliance Review
processes are assets that create value for the customer
Define risk owners (possibly delegate to process owners) - avoid the formation - reduction - sharing - acceptance - cost benefit measures to keep the residual risk within defined tolerance limits
Encourages the identification of measures that answer the question 'How do customers see us?'
plan-prepare-execute-track-report

33. Balanced scorecard - Customer

34. Function point analysis
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
Scenarios set in a risk environment

35. KPI
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
(hierarchy) 5 domains (EDM - po ad ds me) - processes 37 - 211 practices
Used in business administration figures - references which can be the progress or the level of compliance with regard to important objectives or critical success factors measured within an organization and / or calculated - Important KPIs in the serv
inadequate or failed internal processes

36. Good starting points forIT Gov
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going
pain points - improvment opportunities

37. 5 focus area of IT Governance
Benefits realization - risk optimization - resource optimization
stratecic establish alignment / framework - value delivery - risk management - resource mgmt - performance mgmt / stakeholer transparency
iter (interview - test analysis - detecting / hold / summarize - Discuss with auditee
Signature - statement - audit trail

38. The 3 themes of the ICS economic / financial risk
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
operational risk (HR - Law - Nature - IT) - reputational risk
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation

39. Risk appetite
Signature - statement - audit trail
unavoidable risk
To take the residual risk a company is willing risk
risk that the controls are inadequate

40. Anual loss expectancy ALE
quantitative risk analysis approach - damage cost per year * enter frequency
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
The identification of measures that answer the question 'What must we excel at?'
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities

41. Inherent risk
unavoidable risk
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance
(hierarchy) 5 domains (EDM - po ad ds me) - processes 37 - 211 practices
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised

42. COBIT professional guides
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '
implementation - information security - assurance - Risk
Tests - Extensive testing

43. To address three types of risk in the ICS
Financial - Operational - Reputation
risk and risk response evaluation
Encourages the identification of measures that answer the question 'How do customers see us?'
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going

44. Value management
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin
processes are assets that create value for the customer

45. Methods for continuous process improvement
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
only known processes enabling
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals

46. Entity level controls
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener
Benefits realization - risk optimization - resource optimization
operational risk (HR - Law - Nature - IT) - reputational risk
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin

47. risk governance
Encourages the identification of a few relevant high-level financial measures. In Particular - designers were encouraged to choose measures that helped inform the answer to the question 'How do we look to shareholders?'
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities
risk and risk response evaluation
To take the residual risk a company is willing risk

48. Balanced scorecard (BSC)
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
Financial - Operational - Reputation
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p
informations inherited

49. Balanced scorecard - Financial

50. 3 Governance Objectives
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation
Trust Service Contracts
operational risk (HR - Law - Nature - IT) - reputational risk
Benefits realization - risk optimization - resource optimization