Question 1

After Intel faced strong shifts in technologies, such as cloud services, social networking, mobile devices, etc., Intel realized that it needed to establish better governance, creating a _______________.
A) Employee boards
B) Customer boards
C) Security committees
D) Information governance boards
E) Higher control framework

Accepted Answer

Intel needed to establish better governance around information in order to deal with the technological shifts it faced, so the creation of an information governance board would be the most appropriate choice. A, B, C, and E are not directly related to the given problem.

Question 2

________ of the 1980's allowed computing power to spread and gave rise to a decentralized approach to IT governance.
A) Servers
B) Mainframes
C) Networks
D) PCs
E) The WWW

Accepted Answer

The introduction and widespread adoption of personal computers (PCs) in the 1980s allowed computing power to spread to individuals and small businesses, leading to a decentralized approach to IT governance. The other options (servers, mainframes, networks, the WWW) were either already in use before the 1980s or did not contribute significantly to the decentralized approach to IT governance.

Question 3

The IT Governance Council reports directly to the board of directors or the ________.
A) CIO
B) CTO
C) CEO
D) COO
E) CFO

Accepted Answer

The IT Governance Council is responsible for IT governance within the organization, and thus reports directly to the highest level of management - the board of directors or CEO. Out of the given options, only CEO is the correct answer.

Question 4

The archetype that is represented by IT executives and one other group is:
A) IT monarchy
B) Feudal
C) Federal
D) Business monarchy
E) IT duopoly

Accepted Answer

The answer of The archetype that is represented by IT...

Question 5

This is a balanced approach to managing a company's IT organization.
A) Centralization
B) Decentralization
C) Federalism
D) Joint-Control
E) Business Centricity

Accepted Answer

Federalism in IT management combines elements of both centralization and decentralization, allowing for a balanced approach that can adapt to different needs and circumstances within a company.

Question 6

All of the following are mechanisms that can be created to ensure good IT governance EXCEPT:
A) Policies
B) Review boards
C) Steering Committees
D) Consultants
E) IT Governance Council

Accepted Answer

Consultants can provide guidance and recommendations for improving IT governance, but they are not a mechanism in and of themselves. The other options listed - policies, review boards, steering committees, and IT governance councils - are all established mechanisms for ensuring good IT governance.

Question 7

______________ organizations scatter IT components in different locations to address local business needs.
A) Distributed Control
B) Decentralized
C) Federalism
D) Joint-Control
E) Centralized

Accepted Answer

Decentralized organizations scatter IT components in different locations to address local business needs.

Question 8

This IT governance archetype consists of IT individuals or groups of IT executives.
A) Business monarchy
B) IT monarchy
C) Feudal
D) Federal
E) IT Duopoly

Accepted Answer

The IT monarchy archetype consists of IT individuals or groups of IT executives possessing centralized control over IT decision-making and resources, similar to a monarchy.

Question 9

The Sarbanes-Oxley Act of 2002 was primarily aimed at which functional unit of a corporation?
A) Marketing
B) Production
C) Sales
D) IT
E) Finance

Accepted Answer

The Sarbanes-Oxley Act of 2002 was primarily aimed at the finance functional unit of a corporation. This act was passed to address issues of financial reporting transparency and corporate governance, and it requires public companies to adhere to strict financial reporting requirements and maintain effective internal controls over financial reporting.

Question 10

The archetype that is represented by a group of business executives that might or might not include the CIO is:
A) IT monarchy
B) Feudal
C) Federal
D) Business monarchy
E) IT duopoly

Accepted Answer

The "Business Monarchy" archetype refers to decision-making that is led by business executives, which may or may not include the Chief Information Officer (CIO). This model emphasizes the leadership of business over IT decisions, distinguishing it from models where IT or a mix of IT and business leaders share decision-making power.

Question 11

Most companies would like to obtain the advantages derived from both centralized and decentralized organizational paradigms. What type of IT governance model would best help them to achieve this goal?
A) Distributed Control
B) Decentralized
C) Federalism
D) Joint-Control
E) Centralized

Accepted Answer

The federalism IT governance model would be the best choice for companies that want to obtain the advantages of both centralized and decentralized organizational paradigms. In this model, power is shared between a central IT department and decentralized business units, allowing for a balance between centralization and decentralization.

Question 12

IT organizations implement powerful information systems like ERP and SCM that provide centralized data repositories. In addition, business units have tools for their particular units that individuals can use to report on and analyze collected data. This IT governance approach is best described as: ________.
A) Distributed Control
B) Decentralized
C) Federalism
D) Joint-Control
E) Centralized

Accepted Answer

This approach is best described as Federalism because it combines elements of both centralized control (with powerful, centralized information systems like ERP and SCM) and decentralized control (with tools for individual business units to report on and analyze data). This hybrid model allows for a central oversight while also empowering individual units or departments.

Question 13

The decisions that determine how IT assets are structured fall into which one of the five major IT decision categories?
A) IT principles
B) IT architecture
C) IT infrastructure
D) Business application needs
E) IT investment and prioritization

Accepted Answer

The decisions that determine how IT assets are structured fall into the IT architecture category, as this category deals with the overall design and structure of IT assets and systems. The other four categories (IT principles, IT infrastructure, business application needs, and IT investment and prioritization) deal with different aspects of IT decision making, but not specifically with the structure of IT assets.

Question 14

The decision about approval and justification of new technologies would fall into which one of the five major IT decision categories?
A) IT principles
B) IT architecture
C) IT infrastructure
D) Business application needs
E) IT investment and prioritization

Accepted Answer

The decision about approval and justification of new technologies typically falls under IT investment and prioritization. This category involves determining the value, costs, and benefits of IT projects and deciding which projects to pursue based on strategic goals and available resources.

Question 15

IT decisions have been categorized by Peter Weill and Jeanne Ross. These categories include all of the following EXCEPT:
A) IT principles
B) IT architecture
C) IT infrastructure
D) Business application needs
E) IT security

Accepted Answer

Peter Weill and Jeanne Ross categorized IT decisions into IT principles, IT architecture, IT infrastructure, and business application needs, but not IT security.

Question 16

All of the following are frameworks for implementing Sarbanes-Oxley compliance EXCEPT:
A) COSO
B) BCP
C) COBIT
D) ITIL
E) Committee for Sponsoring Organization of the Treadway Commission

Accepted Answer

BCP (Business Continuity Planning) is not a framework specifically designed for Sarbanes-Oxley compliance. The other options, COSO, COBIT, ITIL, and the Committee for Sponsoring Organization of the Treadway Commission (COSO) are all commonly used frameworks for implementing Sarbanes-Oxley compliance.

Question 17

IT governance has two major components: the assignment of decision-making authority and responsibility, and the __________________________.
A) cost considerations
B) decision rights
C) business plan
D) capability maturity model
E) decision-making mechanisms

Accepted Answer

The answer of IT governance has two major components: the...

Question 18

________ of the 1960's dictated a centralized approach to IT governance.
A) Servers
B) Mainframes
C) Networks
D) PCs
E) The WWW

Accepted Answer

Mainframes were the dominant computing technology of the 1960s and were typically centralized systems, which would have influenced a centralized approach to IT governance.

Question 19

This is an IT governance framework that is consistent with COSO controls.
A) HIPPA
B) COBIT
C) SoX
D) ISACA
E) ISO

Accepted Answer

COBIT (Control Objectives for Information and Related Technology) is an IT governance framework that is consistent with COSO (Committee of Sponsoring Organizations of the Treadway Commission) controls. COBIT provides guidelines and best practices for the management and governance of enterprise IT systems, ensuring alignment with business objectives and compliance with regulations and standards. HIPAA (Health Insurance Portability and Accountability Act) is a regulation that sets standards for protecting the privacy and security of patient health information. SoX (Sarbanes-Oxley Act) is a regulation that sets standards for financial reporting and accounting practices. ISACA (Information Systems Audit and Control Association) is a professional organization for IT audit, security, governance, and risk professionals. ISO (International Organization for Standardization) sets standards for various industries and business practices, including information security.

Question 20

This type of organization management is where IT controls most of its IT infrastructure in one location.
A) Distributed IS organization
B) Decentralized IS organization
C) Federalism
D) Joint-Control IS organization
E) Centralized IS organization

Accepted Answer

A centralized IS organization is where IT controls the IT infrastructure in one location, allowing for more control and standardization. This type of organization can be beneficial for organizations that need strict control over their IT systems.

Quiz 10: Governance of the Information Systems Organization

After Intel faced strong shifts in technologies, such as cloud services, social networking, mobile devices, etc., Intel realized that it needed to establish better governance, creating a _______________.

________ of the 1980's allowed computing power to spread and gave rise to a decentralized approach to IT governance.

The IT Governance Council reports directly to the board of directors or the ________.

The archetype that is represented by IT executives and one other group is:

This is a balanced approach to managing a company's IT organization.

All of the following are mechanisms that can be created to ensure good IT governance EXCEPT:

______________ organizations scatter IT components in different locations to address local business needs.

This IT governance archetype consists of IT individuals or groups of IT executives.

The Sarbanes-Oxley Act of 2002 was primarily aimed at which functional unit of a corporation?

The archetype that is represented by a group of business executives that might or might not include the CIO is:

Most companies would like to obtain the advantages derived from both centralized and decentralized organizational paradigms. What type of IT governance model would best help them to achieve this goal?

The decisions that determine how IT assets are structured fall into which one of the five major IT decision categories?

The decision about approval and justification of new technologies would fall into which one of the five major IT decision categories?

IT decisions have been categorized by Peter Weill and Jeanne Ross. These categories include all of the following EXCEPT:

All of the following are frameworks for implementing Sarbanes-Oxley compliance EXCEPT:

IT governance has two major components: the assignment of decision-making authority and responsibility, and the __________________________.

________ of the 1960's dictated a centralized approach to IT governance.

This is an IT governance framework that is consistent with COSO controls.

This type of organization management is where IT controls most of its IT infrastructure in one location.