New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Isaca CGEIT Exam - Topic 12 Question 57 Discussion

Actual exam question for Isaca's CGEIT exam
Question #: 57
Topic #: 12
[All CGEIT Questions]

An enterprise has been focused on establishing an IT risk management framework. Which of the following should be the PRIMARY motivation behind this objective?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Kristofer at Jan 04, 2023, 10:31 PM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Anika
4 months ago
Surprised this isn't more about compliance!
upvoted 0 times
...
Karol
4 months ago
D sounds good, but can we really keep it accurate?
upvoted 0 times
...
Lelia
4 months ago
C is super important too! Executives need to be involved.
upvoted 0 times
...
Catrice
4 months ago
I think B makes more sense. You need to know your limits.
upvoted 0 times
...
Cherilyn
4 months ago
A is definitely the main goal! Responsibility is key.
upvoted 0 times
...
Stephaine
5 months ago
Maintaining a risk registry is definitely important, but I feel like it’s more of a tool rather than the main objective of the IT risk management framework.
upvoted 0 times
...
Mirta
5 months ago
Engaging executives seems vital for policy development, but I wonder if that’s really the primary motivation behind the framework.
upvoted 0 times
...
Tambra
5 months ago
I think increasing risk tolerance is important, but it feels more like a secondary goal rather than the main focus of establishing a framework.
upvoted 0 times
...
Amina
5 months ago
I remember discussing how promoting responsibility is crucial for a strong risk management framework, but I'm not sure if that's the primary motivation.
upvoted 0 times
...
Makeda
5 months ago
I feel pretty confident about this one. Based on the requirements, I think sharing the list views with the appropriate Public Group would be the way to go. That way, we can easily manage access and make sure only the right people can see the list views.
upvoted 0 times
...
Lina
5 months ago
I'm a little confused by the options here. AWS Shield and Amazon Inspector don't seem directly relevant to enforcing encryption, so I'm not sure those would be the right choices. I'll need to think through the different AWS services and features that can handle encryption requirements for S3.
upvoted 0 times
...
Janine
5 months ago
I feel like I have a good grasp on these principles, so I'm leaning towards option C. The standardized contract design can establish conventions that make the services more discoverable. But I'll double-check the other options just to be sure.
upvoted 0 times
...
Fidelia
5 months ago
I'm a little confused by the options here. Creating a login schema policy or an authentication policy label don't seem directly related to assigning the custom form. I'll need to review the Citrix Gateway documentation to make sure I understand the right approach.
upvoted 0 times
...
Goldie
9 months ago
I'm just hoping the exam doesn't ask us to 'risk it all' on the correct answer. That would be a risky move!
upvoted 0 times
...
Tracie
9 months ago
Maintaining a complete and accurate risk registry is important, but I don't think that should be the PRIMARY motivation. That's more of a means to an end.
upvoted 0 times
Reed
8 months ago
B) Increasing the enterprise's risk tolerance level and risk appetite.
upvoted 0 times
...
Adell
8 months ago
Maintaining a complete and accurate risk registry is important, but I don't think that should be the PRIMARY motivation. That's more of a means to an end.
upvoted 0 times
...
Malcom
8 months ago
C) Engaging executives in examining IT risk when developing policies.
upvoted 0 times
...
Sheldon
9 months ago
A) Promoting responsibility throughout the enterprise for managing IT risk.
upvoted 0 times
...
...
Henriette
10 months ago
Engaging executives in examining IT risk when developing policies seems like a crucial step. After all, they're the ones setting the tone at the top.
upvoted 0 times
Stefania
8 months ago
D) Maintaining a complete and accurate risk registry to belief manage IT risk
upvoted 0 times
...
Julio
8 months ago
C) Engaging executives in examining IT risk when developing policies.
upvoted 0 times
...
Weldon
9 months ago
A) Promoting responsibility throughout the enterprise for managing IT risk.
upvoted 0 times
...
...
Kasandra
10 months ago
Hmm, I'm not sure increasing the enterprise's risk tolerance is the best motivation. Shouldn't we be focused on better managing and mitigating IT risks?
upvoted 0 times
Vallie
9 months ago
D) Maintaining a complete and accurate risk registry to belief manage IT risk
upvoted 0 times
...
Yong
10 months ago
C) Engaging executives in examining IT risk when developing policies.
upvoted 0 times
...
Rickie
10 months ago
A) Promoting responsibility throughout the enterprise for managing IT risk.
upvoted 0 times
...
...
Tambra
11 months ago
I believe engaging executives in examining IT risk when developing policies is also crucial to ensure alignment with business objectives.
upvoted 0 times
...
Colette
11 months ago
I think the primary motivation should be promoting responsibility throughout the enterprise for managing IT risk. This aligns with the principles of enterprise-wide risk management.
upvoted 0 times
Pamela
9 months ago
Increasing the enterprise's risk tolerance level can help in making informed decisions.
upvoted 0 times
...
Lashandra
10 months ago
Maintaining a complete and accurate risk registry is crucial for effective risk management.
upvoted 0 times
...
Mickie
10 months ago
Engaging executives in examining IT risk when developing policies is also important.
upvoted 0 times
...
Lyndia
10 months ago
I agree, promoting responsibility is key for managing IT risk.
upvoted 0 times
...
...
Lavera
11 months ago
I agree with Gianna. It's important for everyone in the organization to be accountable for IT risk management.
upvoted 0 times
...
Gianna
11 months ago
I think the primary motivation should be promoting responsibility throughout the enterprise for managing IT risk.
upvoted 0 times
...

Save Cancel