MENU
A regulatory audit assessed an enterprise's main transactional application as noncompliant. In addition to fines and required corrections, an agreement was reached to implement a set of governance controls over IT. Accountability for these controls is BEST assigned to which of the following?
Suggested Answer: D
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
DO
Donte
11 months ago
Internal audit director could also play a key role in this situation.
NE
Nelida
12 months ago
Wait, why would application users be accountable? That seems off.
VI
Vincent
12 months ago
Not so sure, the board of directors might be better suited for accountability.
AS
Ashley
12 months ago
Definitely agree, the CIO has the oversight needed!
JA
Jame
1 year ago
I think the CIO should be responsible for governance controls.
ES
Estrella
1 year ago
I think application users should have some responsibility, but I doubt they would be the best choice for overall accountability in this scenario.
YA
Yaeko
1 year ago
This question feels similar to one we practiced about accountability in IT governance. I think the board of directors might have the final say, but I’m not entirely confident.
CA
Carma
1 year ago
I remember we discussed the role of the CIO in governance controls, but I'm not sure if they should be solely accountable.
LE
Leslie
1 year ago
I feel like the internal audit director would be a good choice since they oversee compliance, but I wonder if the CIO has more direct control over IT governance.
NI
Nikita
1 year ago
Hmm, I'm a bit unsure about this one. The question is asking about item types that can be inserted by authors, but they have to be defined by developers first. I'm not entirely sure which of these options fits that description best. I'll have to think it through carefully.
KI
King
1 year ago
Okay, I think I've got this. Sharing rules and permission set groups are the two features that would allow extending record access beyond the organization-wide defaults. I'll select those.