MENU
An enterprise has been focused on establishing an IT risk management framework. Which of the following should be the PRIMARY motivation behind this objective?
Suggested Answer: B
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
35 comments · newest first
AN
Anika
11 months ago
Surprised this isn't more about compliance!
KA
Karol
11 months ago
D sounds good, but can we really keep it accurate?
LE
Lelia
12 months ago
C is super important too! Executives need to be involved.
CA
Catrice
12 months ago
I think B makes more sense. You need to know your limits.
CH
Cherilyn
12 months ago
A is definitely the main goal! Responsibility is key.
ST
Stephaine
1 year ago
Maintaining a risk registry is definitely important, but I feel like it’s more of a tool rather than the main objective of the IT risk management framework.
MI
Mirta
1 year ago
Engaging executives seems vital for policy development, but I wonder if that’s really the primary motivation behind the framework.
TA
Tambra
1 year ago
I think increasing risk tolerance is important, but it feels more like a secondary goal rather than the main focus of establishing a framework.
AM
Amina
1 year ago
I remember discussing how promoting responsibility is crucial for a strong risk management framework, but I'm not sure if that's the primary motivation.
MA
Makeda
1 year ago
I feel pretty confident about this one. Based on the requirements, I think sharing the list views with the appropriate Public Group would be the way to go. That way, we can easily manage access and make sure only the right people can see the list views.
LI
Lina
1 year ago
I'm a little confused by the options here. AWS Shield and Amazon Inspector don't seem directly relevant to enforcing encryption, so I'm not sure those would be the right choices. I'll need to think through the different AWS services and features that can handle encryption requirements for S3.
JA
Janine
1 year ago
I feel like I have a good grasp on these principles, so I'm leaning towards option C. The standardized contract design can establish conventions that make the services more discoverable. But I'll double-check the other options just to be sure.
FI
Fidelia
1 year ago
I'm a little confused by the options here. Creating a login schema policy or an authentication policy label don't seem directly related to assigning the custom form. I'll need to review the Citrix Gateway documentation to make sure I understand the right approach.
GO
Goldie
1 year ago
I'm just hoping the exam doesn't ask us to 'risk it all' on the correct answer. That would be a risky move!
TR
Tracie
1 year ago
Maintaining a complete and accurate risk registry is important, but I don't think that should be the PRIMARY motivation. That's more of a means to an end.
RE
Reed
1 year ago
B) Increasing the enterprise's risk tolerance level and risk appetite.
AD
Adell
1 year ago
Maintaining a complete and accurate risk registry is important, but I don't think that should be the PRIMARY motivation. That's more of a means to an end.
MA
Malcom
1 year ago
C) Engaging executives in examining IT risk when developing policies.
SH
Sheldon
1 year ago
A) Promoting responsibility throughout the enterprise for managing IT risk.
HE
Henriette
1 year ago
Engaging executives in examining IT risk when developing policies seems like a crucial step. After all, they're the ones setting the tone at the top.
ST
Stefania
1 year ago
D) Maintaining a complete and accurate risk registry to belief manage IT risk
JU
Julio
1 year ago
C) Engaging executives in examining IT risk when developing policies.
WE
Weldon
1 year ago
A) Promoting responsibility throughout the enterprise for managing IT risk.
KA
Kasandra
1 year ago
Hmm, I'm not sure increasing the enterprise's risk tolerance is the best motivation. Shouldn't we be focused on better managing and mitigating IT risks?
VA
Vallie
1 year ago
D) Maintaining a complete and accurate risk registry to belief manage IT risk
YO
Yong
1 year ago
C) Engaging executives in examining IT risk when developing policies.
RI
Rickie
1 year ago
A) Promoting responsibility throughout the enterprise for managing IT risk.
TA
Tambra
2 years ago
I believe engaging executives in examining IT risk when developing policies is also crucial to ensure alignment with business objectives.
CO
Colette
2 years ago
I think the primary motivation should be promoting responsibility throughout the enterprise for managing IT risk. This aligns with the principles of enterprise-wide risk management.
PA
Pamela
1 year ago
Increasing the enterprise's risk tolerance level can help in making informed decisions.
LA
Lashandra
1 year ago
Maintaining a complete and accurate risk registry is crucial for effective risk management.
MI
Mickie
1 year ago
Engaging executives in examining IT risk when developing policies is also important.
LY
Lyndia
1 year ago
I agree, promoting responsibility is key for managing IT risk.
LA
Lavera
2 years ago
I agree with Gianna. It's important for everyone in the organization to be accountable for IT risk management.
GI
Gianna
2 years ago
I think the primary motivation should be promoting responsibility throughout the enterprise for managing IT risk.