Test your basic knowledge |

CGEIT: Certified In The Governance Of Enterprise It

Subjects : certifications, cgeit, it-skills

Instructions:

Answer 50 questions in 15 minutes.
If you are not ready to take this test, you can study here.
Match each statement with the correct term.
Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.

1. Balanced scorecard - Financial

2. Comprehensive audits
executive tasks: prioritization - resource alloc - project tracking
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o
COBIT provides the means of risk management - Riskit provides the ends.
Tests - Extensive testing

3. Entity level controls
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '
enterprise risk management
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener
pain points - improvment opportunities

4. COBIT cascading goals
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
Signature - statement - audit trail
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
Benefits realization - risk optimization - resource optimization

5. The implementation phase of a (Gov. Compliance) Review
iter (interview - test analysis - detecting / hold / summarize - Discuss with auditee
Financial - Operational - Reputation
extract optimal value from investments it - value management: processes - monitor - portfolio management: funds - human - investment management: business case - Manging program / projects
Saving the cost of damage (eg ALE) minus cost of mitigation

6. ISO 27000
critical success factors
informations inherited
Trust Service Contracts
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi

7. The 3 themes of the ICS economic / financial risk
extract optimal value from investments it - value management: processes - monitor - portfolio management: funds - human - investment management: business case - Manging program / projects
iter (interview - test analysis - detecting / hold / summarize - Discuss with auditee
risk and risk response evaluation
operational risk (HR - Law - Nature - IT) - reputational risk

8. The report stage of a review
Observations / findings - risks - recommendation / report
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '
plan: align - plan - Organize (PO) - build: build - Aquire - Implement (AI) - run: Deliver - servie - Support (DS) - Monitor: Monitor - Evaluate - control ME

9. Control risk
critical success factors
Benefits realization - risk optimization - resource optimization
risk that the controls are inadequate
Threat analysis - vulnerability assessment - gap analysis - (positive and negative / opportunities and threats)

10. Anual loss expectancy ALE
Signature - statement - audit trail
critical success factors
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
quantitative risk analysis approach - damage cost per year * enter frequency

11. ISO 9000
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '
Financial - Operational - Reputation
inherent risk - control risk: insufficient control system - detection risk: insufficient testing

12. Escrow contracts
Encourages the identification of measures that answer the question 'How do customers see us?'
Trust Service Contracts
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
Financial - Operational - Reputation

13. Derivation Cobit practices / control objectives
Define risk owners (possibly delegate to process owners) - avoid the formation - reduction - sharing - acceptance - cost benefit measures to keep the residual risk within defined tolerance limits
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
Signature - statement - audit trail
(hierarchy) 5 domains (EDM - po ad ds me) - processes 37 - 211 practices

14. Risk analysis techniques
Encourages the identification of a few relevant high-level financial measures. In Particular - designers were encouraged to choose measures that helped inform the answer to the question 'How do we look to shareholders?'
pain points - improvment opportunities
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o
Threat analysis - vulnerability assessment - gap analysis - (positive and negative / opportunities and threats)

15. Function point analysis
Signature - statement - audit trail
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o
who should do what? - establishing accountability - VR / goals objectives - GL translate strategy into action (automation - cost - risk mgmt)

16. Key principle of BPM
COBIT provides the means of risk management - Riskit provides the ends.
processes are assets that create value for the customer
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
An internally controlled collection and analysis of values. In a control self-assessment fill out one or more units surveyed questionnaires - which can then be evaluated independently. This survey can help the units (individuals - groups - department

17. Valit content framework
enterprise risk management
extract optimal value from investments it - value management: processes - monitor - portfolio management: funds - human - investment management: business case - Manging program / projects
pain points - improvment opportunities
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener

18. ISO 31000
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o
enterprise risk management
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin
Tests - Extensive testing

19. risk governance
extract optimal value from investments it - value management: processes - monitor - portfolio management: funds - human - investment management: business case - Manging program / projects
risk and risk response evaluation
implementation - information security - assurance - Risk
iter (interview - test analysis - detecting / hold / summarize - Discuss with auditee

20. COBIT framework
basic ingredients - basic principles - enterprise enablers - goals cascade - maturity model
risk that the controls are inadequate
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication
only known processes enabling

21. Inherent risk
unavoidable risk
pain points - improvment opportunities
risk that something will NOT be revealed - ill-prepared - not tested properly - misinterpreted findings weighted wrong
Saving the cost of damage (eg ALE) minus cost of mitigation

22. Balanced scorecard - Internal Business Processes

23. 5 focus area of IT Governance
enterprise risk management
stratecic establish alignment / framework - value delivery - risk management - resource mgmt - performance mgmt / stakeholer transparency
processes are assets that create value for the customer
Tests - Extensive testing

24. Value management
Tests - Extensive testing
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
Scenarios set in a risk environment
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p

25. application vs. controls. IT general controls
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation
Tests - Extensive testing
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
Signature - statement - audit trail

26. A widely used definition of operational risk is the one contained in the Basel II [1] regulations. This definition states that operational risk is the risk of loss resulting from ____________ - people and systems - or from external events.
critical success factors
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener
inadequate or failed internal processes
Value analysis - was initially applied WA - to identify and eliminate unnecessary costs. WA is equally successful in improving the performance and function of resources other than the costs. In the course of time - extended the WA applications from p

27. To address three types of risk in the ICS
Encourages the identification of measures that answer the question 'How do customers see us?'
Define risk owners (possibly delegate to process owners) - avoid the formation - reduction - sharing - acceptance - cost benefit measures to keep the residual risk within defined tolerance limits
Financial - Operational - Reputation
Scenarios set in a risk environment

28. Balanced scorecard (BSC)
Define risk owners (possibly delegate to process owners) - avoid the formation - reduction - sharing - acceptance - cost benefit measures to keep the residual risk within defined tolerance limits
risk that something will NOT be revealed - ill-prepared - not tested properly - misinterpreted findings weighted wrong
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '

29. Return on security investment ROSI
plan: align - plan - Organize (PO) - build: build - Aquire - Implement (AI) - run: Deliver - servie - Support (DS) - Monitor: Monitor - Evaluate - control ME
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
inadequate or failed internal processes
Saving the cost of damage (eg ALE) minus cost of mitigation

30. Procedure for Governance Compliance Review
Benefits realization - risk optimization - resource optimization
plan-prepare-execute-track-report
Used in business administration figures - references which can be the progress or the level of compliance with regard to important objectives or critical success factors measured within an organization and / or calculated - Important KPIs in the serv
quantitative risk analysis approach - damage cost per year * enter frequency

31. Riskit vs. COBIT
COBIT provides the means of risk management - Riskit provides the ends.
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
Observations / findings - risks - recommendation / report
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi

32. benefit management (Profit organization realization)
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
Encourages the identification of measures that answer the question 'How do customers see us?'
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI
operational risk (HR - Law - Nature - IT) - reputational risk

33. COBIT professional guides
The identification of measures that answer the question 'What must we excel at?'
implementation - information security - assurance - Risk
COBIT provides the means of risk management - Riskit provides the ends.
plan-prepare-execute-track-report

34. COBIT enabler guides
pain points - improvment opportunities
risk that the controls are inadequate
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance
only known processes enabling

35. Good starting points forIT Gov
pain points - improvment opportunities
critical success factors
plan-prepare-execute-track-report
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication

36. Audit risk consists of...
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
inadequate or failed internal processes
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going
The identification of measures that answer the question 'What must we excel at?'

37. IT Governance and COBIT
A quality management standard describes the requirements that must be satisfied by the management system of a company in order to meet a certain standard in the implementation of quality management. It can serve both informative for implementation wi
5 gov processes (GL - PR) - std (users realize - risks opt opt ress) and framework - stakeholder transparency create - it gov: provide direction - evaluate performance - it Mgmnt: translate strategy into direction - and report performance mesure - 32
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
Controls at the corporate level - are internal controls that help Ensure that management directives pertaining to the entire entity are Carried out. They are the second level of a top-down approach to understanding the risks of an organization. Gener

38. IT Steering Committee
Review process for software system - The functional size is determined - where you split the functional requirements of an application into small - meaningful to the user activities that elementary processes. Same elementary processes are evaluated o
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation
executive tasks: prioritization - resource alloc - project tracking
inadequate or failed internal processes

39. Methods for continuous process improvement
unavoidable risk
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities
risk that something will NOT be revealed - ill-prepared - not tested properly - misinterpreted findings weighted wrong
TQM - BPM /BPR (... reengineering) - BSC - Six Sigma - CMMI

40. Risk appetite
To take the residual risk a company is willing risk
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
inherent risk - control risk: insufficient control system - detection risk: insufficient testing
general: magmt change - security - operations control Application: do everything to do with app. pgm. has zb source management - authentication validation

41. Structure of the 32 COBIT processes mgmt.
plan: align - plan - Organize (PO) - build: build - Aquire - Implement (AI) - run: Deliver - servie - Support (DS) - Monitor: Monitor - Evaluate - control ME
a risk Arising from execution of a company's business functions. It is a very broad concept Which Focuses on the risks you Arising from the people - systems and processes through Which a company operates. It therefore includes other categories examin
only known processes enabling
Scenarios set in a risk environment

42. Three different control categories?
Preventive controls - detective controls - corrective controls (troubleshooting instructions)
Signature - statement - audit trail
Benefits realization management (BRM) (also benefits management or benefits realization) is the explicit planning - delivery and management of whole life benefits from an investment. An investment is only successful if Intended benefits are Realised
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .

43. Risk analysis methodology
Scenarios set in a risk environment
inadequate or failed internal processes
what are the drivers - where are we now - where do we want to be - what needs to be done (project plan) - how do we get there (execute) - did we get there - how to keep the momentum going
Scoping - formal enactment - clear Vogaben at exceptions - verification of compliance

44. Hierarchy of policies
stratecic establish alignment / framework - value delivery - risk management - resource mgmt - performance mgmt / stakeholer transparency
Trust Service Contracts
A strategic performance management tool - a semi-standard structured report - supported by proven design methods and automation tools - that can be used by managers to keep track of the execution of activities by the staff within their control and .
policy - principles - statements

45. Operational risk is...

46. Types of assertions
executive tasks: prioritization - resource alloc - project tracking
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
Signature - statement - audit trail
Benefits realization - risk optimization - resource optimization

47. IT Strategy Committee
VR level - integration and business strategy it - Chaired by a business executive / board member
critical success factors
Business goals with Gov. goals priorisiern - IT goals with U-prioritize targets (script 82) - prioritize process with IT goals
Encourages the identification of measures that answer the question? 'How can we continue to improve and create value. '

48. KPI
policy - principles - statements
Used in business administration figures - references which can be the progress or the level of compliance with regard to important objectives or critical success factors measured within an organization and / or calculated - Important KPIs in the serv
only known processes enabling
performance monitoring - to demostrate the effectivness if IT and communicate about it - Performance - risk and capabilities

49. Refine the innovation process management
implementation - information security - assurance - Risk
VR level - integration and business strategy it - Chaired by a business executive / board member
basic ingredients - basic principles - enterprise enablers - goals cascade - maturity model
create an environment conductive to innovate - Maintain / understand the enterprise environment - monitor / scan the technology environment - assess the potential of emerging tech.- recommend appropriate further initiatives - monitor the implication

50. Balanced scorecard - Customer