Q: 2
An enterprise has had the same IT governance framework in place for several years. Currently, large
and small capital projects go through the same architectural governance reviews. Despite repeated
requests to streamline the review process for small capital projects, business units have received no
response from IT. The business units have recently escalated this issue to the newly appointed GO.
Which of the following should be done FIRST to begin addressing business needs?
Options
Discussion
Option C this time. Gotta assess the impact before making changes to governance, especially with long-standing frameworks. That way you know what you're getting into and avoid creating bigger issues accidentally. Pretty sure that's the expected ISACA logic here, but open if someone sees otherwise.
C , B feels like a distractor since explaining governance doesn't fix the issue. Impact assessment is usually ISACA's first move, right?
Pretty sure C here, that's ISACA's usual order. Assessment first so any changes are justified and risks are clear.
B shows up a ton in the official guide and recent practice exams for first steps like this. Definitely review that section if you're prepping, it helps lock down these sequencing questions.
Why do you think D would be better than C to start with? ISACA questions like this usually expect assessment first.
C is the one I’d choose here.
A is wrong, C. Had something like this in a mock and ISACA goes with impact assessment first before making framework changes. Assigning a team or explaining governance comes after you actually know what could break or improve. You guys agree with C?
C fits ISACA's usual approach since you always assess impact before making governance changes. That's what the official guide and sample test questions reinforce too. Pretty sure that's the logic here, but open to other views if someone interpreted it differently.
I think C but sometimes these "first" questions get me, since D is about just jumping to action. ISACA logic usually wants us to assess impact before changing anything though. Not 100% sure, but C feels safer. Disagree?
C vs D? D is tempting since fixing it fast sounds good, but ISACA practice always pushes impact assessment first (C) to avoid unintended consequences. Pretty sure C is what they're looking for here, unless I'm missing something obvious.
Be respectful. No spam.
