Deck 8: Governance of the Information Systems Organization

Question 1

After its PlayStation Network service was compromised,Sony realized that it needed to establish better ____________ governance.

A) employee
B) customer
C) security
D) IT
E) data

Answer 1

C

Question 2

This is an IT governance framework that is consistent with COSO controls.

A) HIPPA
B) COBIT
C) SoX
D) ISACA
E) ISO

Answer 2

B

Question 3

IT decisions have been categorized by Peter Weill and Jeanne Ross.These categories include all of the following EXCEPT:

A) IT principles
B) IT architecture
C) IT infrastructure
D) Business application needs
E) IT security

Answer 3

E

Question 4

The decision about approval and justification of new technologies would fall into which one of the five major IT decision categories?

A) IT principles
B) IT architecture
C) IT infrastructure
D) Business application needs
E) IT investment and prioritization

Question 5

________ of the 1980's allowed computing power to spread and gave rise to a decentralized approach to IT governance.

A) Servers
B) Mainframes
C) Networks
D) PCs
E) The WWW

Question 6

What is a steering committee at the highest level called?

A) Executive Steering Committee
B) IT Governance Council
C) Executive Council of IT
D) Systems Steering Council
E) Chief Steering Committee

Question 7

Most companies would like to obtain the advantages derived from both centralized and decentralized organizational paradigms. What type of IT governance model would best help them to achieve this goal?

A) Distributed Control
B) Decentralized
C) Federalism
D) Joint-Control
E) Centralized

Question 8

________ of the 1960's dictated a centralized approach to IT governance.

A) Servers
B) Mainframes
C) Networks
D) PCs
E) The WWW

Question 9

______________ organizations scatter IT components in different locations to address local business needs.

A) Distributed Control
B) Decentralized
C) Federalism
D) Joint-Control
E) Centralized

Question 10

This is a balanced approach to managing a company's IT organization.

A) Centralization
B) Decentralization
C) Federalism
D) Joint-Control
E) Business Centricity

Question 11

The Sarbanes-Oxley Act of 2002 was primarily aimed at which functional unit of a corporation?

A) Marketing
B) Production
C) Sales
D) IT
E) Finance

Question 12

The decisions that set the foundation for IT capabilities shared throughout an organization fall into which one of the five major IT decision categories?

A) IT principles
B) IT architecture
C) IT infrastructure
D) Business application needs
E) IT investment and prioritization

Question 13

All of the following are mechanisms that can be created to ensure good IT governance EXCEPT:

A) Policies
B) Review boards
C) Steering Committees
D) Consultants
E) IT Governance Council

Question 14

Which one of the following can be said about IT security policies?

A) IT security policies define the scope and overall expectation for the company's information security program.
B) IT security policies discourage standardization and integration.
C) IT security policies require an IT-only perspective.
D) IT security policies complicate the decision-making process.
E) IT security policies are loose to allow for many choices.

Question 15

IT governance has two major components: the assignment of decision-making authority and responsibility,and the __________________________.

A) cost considerations
B) decision rights
C) business plan
D) capability maturity model
E) decision-making mechanisms

Question 16

This type of organization management is where IT controls most of its IT infrastructure in one location.

A) Distributed IS organization
B) Decentralized IS organization
C) Federalism
D) Joint-Control IS organization
E) Centralized IS organization

Question 17

All of the following are frameworks for implementing Sarbanes-Oxley compliance EXCEPT:

A) COSO
B) BCP
C) COBIT
D) ITIL
E) Committee for Sponsoring Organization of the Treadway Commission

Question 18

The IT Governance Council reports directly to the board of directors or the ________.

A) CIO
B) CTO
C) CEO
D) COO
E) CFO

Question 19

IT organizations implement powerful information systems like ERP and SCM that provide centralized data repositories.In addition,IT organizations provide business units with tools that individuals can use to report on and analyze collected dat a.This IT governance approach is best described as: ________.

A) Distributed Control
B) Decentralized
C) Federalism
D) Joint-Control
E) Centralized

Question 20

Bob has been tasked with creating a plan to keep his company functioning in case of emergency. He needs to create which ONE of the following plans?

A) Security Policy
B) Emergency Preparedness Plan
C) Disaster Continuity Plan
D) Collateral Damage Plan
E) Business Continuity Plan

Question 21

IT plays a major role in ensuring the accuracy of financial dat
a.

Question 22

As a result of Sarbanes-Oxley,IT managers are now required to manage the level of controls needed to mitigate risk in business processes.

Question 23

The establishment of information security policies requires IT leaders to set security standards and business leaders to understand the implications for users and business processes.Therefore,the IT governance archetype recommended in this situation is which one of the following?

A) Business monarchy
B) IT monarchy
C) Feudal
D) Federal
E) IT Duopoly

Question 24

What act was passed in 2002 in response to the rogue accounting activities of major global corporations such as Enron,Worldcom and their accounting firm Arthur Andersen?

Question 25

A steering committee works especially well with this particular IT governance archetype.

A) Business monarchy
B) IT monarchy
C) Feudal
D) Federal
E) IT Duopoly

Question 26

A steering committee is geared only towards the highest level of the organization and reports directly to the board of directors or the CEO.

Question 27

Information security infrastructure decisions deal with technology selection and configuration.Therefore,the IT governance archetype recommended in this situation is which one of the following?

A) Business monarchy
B) IT monarchy
C) Feudal
D) Federal
E) IT Duopoly

Question 28

The US Army is embracing BYOD by launching a program to ensure soldiers have the appropriate decision rights to select his/her computing device.

Question 29

This IT governance archetype consists only of business unit leaders,key process owners,or their delegates.

Question 30

This IT governance archetype consists of IT individuals or groups of IT executives.

A) Business monarchy
B) IT monarchy
C) Feudal
D) Federal
E) IT Duopoly

Question 31

As a result of Sarbanes-Oxley Act,the CEO,CFO and CIO must certify financial accounting records.

Question 32

This IT governance archetype consists of C-level executives and at least one other business group.An IT executive may be an additional participant.

A) Business monarchy
B) IT monarchy
C) Feudal
D) Federal
E) IT Duopoly

Question 33

Security strategy is not a technical decision.

Question 34

This is the act through which behavior is aligned with business goals through empowerment and monitoring.

Question 35

Business continuity planning must be designed to respond to its biggest threat,which is disgruntled or dishonest employees.

Question 36

The global nature of business today makes complete centralization impossible.

Question 37

This is a highly specific measurement used to indicate whether business process goalsare being met.

Question 38

This term is used to describe the increasingly powerful tools available to consumers that are impacting corporations.

Question 39

This is a committee that is formally designated to approve,monitor and review specific topics that ensure IT governance.

Question 40

The combinations of people to whom decision rights are allocated are classified by various IT governance ________.

Question 41

Why is it recommended that the IT governance archetype for an organization's information security strategy be business monarch?

Question 42

Explain the role the IT organization has in ensuring a company's Sarbanes-Oxley compliance.

Question 43

Define federalism as it pertains to organizational structures. How does it improve on the centralized model?

Question 44

Review the description of 3 different IT organizations and map the organization's design to the IT governance model it best represents.

Question 45

Match the advantages below as either being associated with a centralized IT governance approach or a decentralized IT governance approach.

Question 46

Match the disadvantages below as either being associated with a centralized IT governance approach or a decentralized IT governance approach.

Question 47

Explain the value steering committees offer the IT organization.

Question 48

Match the allocation of decision rights below with the IT governance archetype it represents.

Question 49

Detail the 3 stages of business continuity planning.
Matching

Question 50

Match the SoX compliance methodology with its description.

Question 51

Match the organization with the IT governance approach it has chosen.

Question 52

Explain how federalism is able to capture the benefits of centralized and decentralized IT governance while eliminating the drawbacks of each.