Exam 5: Corporate Governance and IT

A(n)____ business function can be unavailable for several days in times of a major disaster without causing major problems.

The ____ ensures that internal controls are in place to govern the creation and documentation of financial statements.

Acquisition of the COBIT framework,including tools and templates,is relatively expensive,but the tools are considered a good investment.

The primary people involved in corporate governance only include the board of directors and the CEO.

____ is a decision-making process that involves investments in IT.

Interest in corporate governance has grown due to recent accounting scandals resulting in bankruptcies at companies such as Arthur Andersen,Enron,Global Crossing,Tyco,and Worldcom.

An organization's executives and board of directors carry out governance through ____________________ that oversee critical areas such as audits,compensation,and acquisitions.

____________________ procedures define the steps to be taken during a disaster and immediately following it.

The COBIT process known as "Effective Continuous Service" describes how to create an effective disaster recovery plan.

The business continuity plan needs to be ____________________ to ensure that it is effective and that people can execute it.

A(n)____ business function is extremely critical to the operation of the firm and cannot be unavailable more than a few minutes without causing severe problems.

ITIL and COBIT are competing frameworks.

What does the team do in the Act step of the Plan-Do-Check-Act model?

List the specific features to consider for inclusion in the recovery of a AAA priority business function.

Good ____________________ controls and management accountability must be embedded in the organization to avoid IT-related risks.

For most organizations,the ____ includes members of the fire department,police department,and other first responder.

____ is the process established by an organization's board of directors,managers,and IT systems to provide reasonable assurance for the effectiveness and efficiency of operations,the reliability of financial reporting,and compliance with applicable laws and regulations.

Today IT is viewed simply as a support function that is separate and distinct from a business.

The time within which a business function must be recovered before an organization suffers serious damage is called the __________________ objective.

It is a good practice to identify "____" who are responsible for evacuating a given floor or work area.