Isaca IT Risk Fundamentals Exam - Topic 4 Question 19 Discussion

Actual exam question for Isaca's IT Risk Fundamentals exam

Question #: 19
Topic #: 4

Which of the following is the BEST way to interpret enterprise standards?

AA means of implementing policy

BAn approved code of practice
Q Documented high-level principles

Show Suggested Answer

Suggested Answer: A

Unternehmensstandards dienen als Mittel zur Umsetzung von Richtlinien. Sie legen spezifische Anforderungen und Verfahren fest, die sicherstellen, dass die Unternehmensrichtlinien eingehalten werden.

Definition und Bedeutung von Standards:

Enterprise Standards: Dokumentierte, detaillierte Anweisungen, die die Umsetzung von Richtlinien untersttzen.

Implementierung von Richtlinien: Standards helfen dabei, die abstrakten Richtlinien in konkrete, umsetzbare Manahmen zu berfhren.

Beispiele und Anwendung:

IT-Sicherheitsstandards: Definieren spezifische Sicherheitsanforderungen, die zur Einhaltung der bergeordneten IT-Sicherheitsrichtlinien erforderlich sind.

Compliance-Standards: Stellen sicher, dass gesetzliche und regulatorische Anforderungen eingehalten werden.

ISA 315: Role of IT controls and standards in implementing organizational policies.

ISO 27001: Establishing standards for information security management to support policy implementation.

by Donette at Aug 16, 2025, 10:04 PM

Limited Time Offer

25%

Off

Get Premium IT Risk Fundamentals Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lucy

2 months ago

Totally agree with Sheridan, B is the way to go!

upvoted 0 times

...

Sheridan

2 months ago

I think B is more accurate, it's about approved practices.

upvoted 0 times

...

Lorean

3 months ago

Wait, are we sure B isn't just a fancy way to say A?

upvoted 0 times

...

Leeann

3 months ago

I thought enterprise standards were just guidelines, not strict codes.

upvoted 0 times

...

Josefa

3 months ago

A is definitely about policy implementation.

upvoted 0 times

...

Kenneth

3 months ago

I keep mixing up the definitions of codes of practice and policies; this question is throwing me off a bit!

upvoted 0 times

...

Janey

4 months ago

I feel like there was a practice question that emphasized the importance of documented principles, which makes me lean towards option B.

upvoted 0 times

...

Alaine

4 months ago

I'm not entirely sure, but I remember discussing how enterprise standards relate to policy implementation.

upvoted 0 times

...

Sheridan

4 months ago

I think option B sounds familiar, like something we covered in the last module about compliance.

upvoted 0 times

...

Luann

4 months ago

I feel pretty confident about this one. Enterprise standards are typically high-level guidelines, so I'm going to go with option C as the best answer.

upvoted 0 times

...

An

4 months ago

Okay, I've got a strategy here. I'll focus on the key differences between the answer choices and try to determine which one best captures the essence of "interpreting enterprise standards".

upvoted 0 times

...

Geoffrey

4 months ago

I'm a bit confused by the wording of this question. I'll need to re-read it a few times to make sure I understand what they're asking.

upvoted 0 times

...

Martha

5 months ago

Hmm, this looks like a tricky one. I'll need to think carefully about the differences between implementing policy, approved codes of practice, and high-level principles.

upvoted 0 times

...