Isaca CGEIT Exam - Topic 9 Question 31 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 31
Topic #: 9

When deciding to develop a system with sensitive data, which of the following is MOST important to include in a business case?

AA risk assessment to determine the appropriate controls

BUpdated enterprise architecture (EA)

CSkills gap analysis

DThe additional cost of encrypting sensitive data

Show Suggested Answer

Suggested Answer: D

by Celeste at May 04, 2022, 01:13 AM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shawna

4 months ago

Skills gap analysis? Seems a bit off for sensitive data systems.

upvoted 0 times

...

Izetta

4 months ago

A is the way to go, no doubt about it!

upvoted 0 times

...

Alline

4 months ago

Wait, are we really prioritizing costs over security?

upvoted 0 times

...

Maybelle

4 months ago

I think B is just as important for overall structure.

upvoted 0 times

...

Candida

5 months ago

Definitely A, risk assessments are crucial!

upvoted 0 times

...

Craig

5 months ago

Skills gap analysis seems less relevant to me in this context, but I guess it could be important if we don't have the right people to manage sensitive data.

upvoted 0 times

...

Skye

5 months ago

I recall a similar question where we discussed the importance of encryption costs, but I wonder if that's the most critical factor here.

upvoted 0 times

...

Yuki

5 months ago

I'm not entirely sure, but I feel like updated enterprise architecture might be important too. It could help align the system with business goals.

upvoted 0 times

...

Thomasena

5 months ago

I think a risk assessment is crucial because it helps identify what controls we need for sensitive data. I remember practicing a question about risk management.

upvoted 0 times

...

Kendra

5 months ago

I'm a bit confused by this question. None of the options seem like a clear-cut solution. I'll need to do some additional research to determine the best way to approach this.

upvoted 0 times

...

Clarinda

5 months ago

Okay, I think I've got this. OCSP does introduce some network latency because it checks certificates one at a time. So the statement is true.

upvoted 0 times

...

Elvera

5 months ago

I have this nagging feeling that option D could be correct since it seems like all of them contribute to discoverability in some way.

upvoted 0 times

...

Thad

5 months ago

The Gross Happiness index sounds interesting, but I'm not familiar with that. I'll have to look into it more to see if it's a good fit for this scenario.

upvoted 0 times

...