Exam CGEIT topic 1 question 227 discussion

Actual exam question from Isaca's CGEIT

Question #: 227
Topic #: 1

The IT program manager does not see the value of conducting risk assessments for a new major IT project. The manager is reluctant to cooperate with internal auditors and the newly formed steering committee. Midway through the project, program requirements were changed because the CEO is a friend of a vendor and wants to implement this vendor's new technology. This decision will cause the current IT program budget to be insufficient and will be shown as overspending,
After the requirement change request, the IT program manager should FIRST:

A. report the matter to internal audit as a program deviation to be reviewed.
B. obtain confirmation from the business and a decision by the steering committee.
C. align IT with the business and agree to the business request.
D. request additional funding from the business owner to cover the additional scope.

Show Suggested Answer

Suggested Answer: B 🗳️

by Ramye at Jan. 11, 2022, 5:11 p.m.

Comments

Submit Cancel

shiowbah

9 months, 3 weeks ago

A. report the matter to internal audit as a program deviation to be reviewed.

upvoted 1 times

...

Sathish5

1 year ago

Selected Answer: B

This ensures that the change is aligned with business goals and that the appropriate decision-making body approves any necessary adjustments to the budget and project scope

upvoted 1 times

...

Ramye

3 years ago

Curious - what decision can the steering committee provide where CEO already made the decision? CEO’s decision is final, no?

upvoted 1 times

...