Exam IIA-CIA-Part3 topic 2 question 236 discussion

Actual exam question from IIA's IIA-CIA-Part3

Question #: 236
Topic #: 2

An organization is considering integration of governance, risk, and compliance (GRC) activities into a centralized technology-based resource. In implementing this GRC resource, which of the following is a key enterprise governance concern that should be fulfilled by the final product?

A. The board should be fully satisfied that there is an effective system of governance in place through accurate quality information provided
B. Compliance, audit, and risk management can find and seek efficiencies between their functions through integrated information reporting.
C. Key compliance and risk metrics can be tracked and compared throughout the enterprise aiding in identifying problem departments
D. Data analytics can be utilized for trending of the data to ensure that patterns and ongoing monitoring occurs throughout the organization

Show Suggested Answer

Suggested Answer: B 🗳️

by emtofid at Feb. 5, 2025, 9:44 p.m.

Comments

Submit Cancel

Elvoo

3 months, 2 weeks ago

Selected Answer: A

why not A?

upvoted 1 times

...

emtofid

4 months, 1 week ago

Selected Answer: A

The key enterprise governance concern in implementing a GRC system is to ensure that the board of directors has full confidence in the organization's governance system. This confidence comes from accurate, high-quality information that allows the board to effectively oversee the organization’s governance, risk management, and compliance activities. An effective GRC solution should provide the board with real-time, reliable data on how governance structures and controls are functioning across the organization, enabling them to make informed decisions and ensure proper oversight.

upvoted 2 times

...