Isaca CGEIT Exam - Topic 4 Question 59 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 59
Topic #: 4

[All CGEIT Questions]

What is the PRIMARY objective for performing an IT due diligence review prior to the acquisition of a competitor?

ADocument the competitor's governance structure.

BEnsure that the competitor understands significant IT risks.

CAssess the status of the risk profile of the competitor.

DDetermine whether the competitor is using industry-accepted practices.

Show Suggested Answer

Suggested Answer: C

by Bernardine at May 29, 2023, 01:33 AM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Zona

3 months ago

I disagree, understanding IT risks is crucial too!

upvoted 0 times

...

Winifred

3 months ago

Surprised that people think it's just about risks!

upvoted 0 times

...

Walton

4 months ago

I thought it was more about governance, but C makes sense.

upvoted 0 times

...

Vivan

4 months ago

Totally agree, option C is the way to go.

upvoted 0 times

...

Leanora

4 months ago

It's all about assessing the risk profile!

upvoted 0 times

...

Terrilyn

4 months ago

I lean towards option C because knowing the risk profile seems crucial before an acquisition, but I could be wrong.

upvoted 0 times

...

Ronny

4 months ago

I feel like documenting governance is important too, but it might not be the primary objective.

upvoted 0 times

...

Novella

5 months ago

I remember a practice question that emphasized understanding IT risks, so maybe option B is the right choice?

upvoted 0 times

...

Jose

5 months ago

I think the main goal is to assess the competitor's risk profile, but I'm not entirely sure if that's the primary focus.

upvoted 0 times

...

Ayesha

5 months ago

I'm a bit confused on the differences between the options. I'll need to review my security concepts to make sure I understand which one is the best solution.

upvoted 0 times

...

Sommer

5 months ago

I'm not sure, but I remember something about 3PL and how it helps with logistics—maybe that's relevant here?

upvoted 0 times

...

Ona

5 months ago

I remember practicing a similar question on VPN types, but I'm not sure if this one is just about Meraki.

upvoted 0 times

...

Victor

5 months ago

I'm not entirely sure about this one. I know integration testing comes after unit testing, but I'm not certain about the relationship to system testing. I'll have to think it through more carefully.

upvoted 0 times

...

Franklyn

10 months ago

Okay, but what if the competitor is using a totally rad, cutting-edge IT system that's not 'industry-accepted'? Shouldn't we still look into that?

upvoted 0 times

...

Casie

10 months ago

Haha, I bet the IT team is going to have a field day with this one. 'Cause you know they're just dying to document the competitor's governance structure. Real groundbreaking stuff.

upvoted 0 times

Margurite

8 months ago

D) Determine whether the competitor is using industry-accepted practices.

upvoted 0 times

...

Tricia

8 months ago

C) Assess the status of the risk profile of the competitor.

upvoted 0 times

...

Carlee

8 months ago

A) Document the competitor's governance structure.

upvoted 0 times

...

Tambra

10 months ago

D seems like the most logical choice to me. Determining if they're using industry-accepted practices is crucial for evaluating their compatibility with our company.

upvoted 0 times

Gerardo

8 months ago

Documenting their governance structure can also provide valuable insights, so A is not to be overlooked.

upvoted 0 times

...

Hobert

9 months ago

It's also important to assess their risk profile, so C is crucial as well.

upvoted 0 times

...

Ahmed

9 months ago

I agree, D is important for ensuring a smooth integration.

upvoted 0 times

...

Noe

10 months ago

I think B is the way to go. Ensuring the competitor understands the risks is key to making an informed decision, right? Can't have any surprises down the line.

upvoted 0 times