Question 1

Only floor wardens need to be trained to recognize and respond to various types of disaster warnings,such as those for fires,tornados,gas releases,and so on.

Accepted Answer

All employees should be trained to recognize and respond to various types of disaster warnings, not just floor wardens. This training is an important part of emergency preparedness and can potentially save lives in the event of a disaster.

Question 2

Acquisition of the COBIT framework,including tools and templates,is relatively expensive,but the tools are considered a good investment.

Accepted Answer

False

Question 3

IT-related initiatives are generally simple and straightforward.

Accepted Answer

IT-related initiatives can often be complex and involve multiple steps, stakeholders, and technical considerations. They can also require significant planning, resources, and coordination to implement successfully.

Question 4

One good approach to backing up data in case of a disaster is to have employees take backup copies of vital data home at the end of the work day.

Accepted Answer

While taking backup copies of vital data home can be a part of a backup strategy, it should not be the only approach. This approach has some drawbacks as it can introduce privacy and security risks, and it may not be feasible for large amounts of data. A comprehensive backup strategy should include off-site backups, cloud storage, and other solutions to ensure the safety and availability of critical data in case of a disaster.

Question 5

Interest in corporate governance has grown due to recent accounting scandals resulting in bankruptcies at companies such as Arthur Andersen,Enron,Global Crossing,Tyco,and Worldcom.

Accepted Answer

The statement correctly identifies the recent accounting scandals and bankruptcies that have increased interest in corporate governance.

Question 6

Today IT is viewed simply as a support function that is separate and distinct from a business.

Accepted Answer

IT is no longer viewed simply as a support function, but as an integral part of business strategy and operations. It is closely linked with the success of a business and its competitiveness.

Question 7

ITIL and COBIT are competing frameworks.

Accepted Answer

ITIL (Information Technology Infrastructure Library) and COBIT (Control Objectives for Information and Related Technology) are not competing frameworks, but rather complementary ones. They both focus on IT governance and best practices, with different areas of emphasis. ITIL is more focused on IT service management, whereas COBIT focuses more on IT governance and risk management. Many organizations use both frameworks together to create a comprehensive approach to IT management.

Question 8

A key to the successful introduction and adoption of more effective internal controls is ensuring that managers understand why they need to care about improved internal controls.

Accepted Answer

This statement is true because without understanding why improved internal controls are important, managers may not prioritize implementing them or may not allocate sufficient resources to ensure their effectiveness. It is important to communicate the benefits of improved internal controls, such as reduced risk of errors and fraud, better compliance with regulations, and improved accountability and transparency.

Question 9

COBIT is an internationally accepted standard for IT governance and control practices.

Accepted Answer

COBIT (Control Objectives for Information and Related Technology) is a globally recognized framework for IT management and governance. It helps organizations ensure that their IT processes align with their overall business objectives, and provides a set of best practices for information security, risk management, and regulatory compliance. COBIT is widely used by businesses, governments, and other organizations around the world to improve their IT performance and reduce risks associated with technology.

Question 10

The primary people involved in corporate governance only include the board of directors and the CEO.

Accepted Answer

The primary people involved in corporate governance include the board of directors, CEO, shareholders, management team, and other stakeholders.

Question 11

COBIT is a set of decades-old standards that are highly regarded by auditors because they provide specific guidelines and are completely independent of any computer hardware or software platforms.

Accepted Answer

COBIT (Control Objectives for Information and Related Technology) is a set of standards and best practices for IT management and governance. It was first developed in 1996 and has been regularly updated since then. COBIT is technology-neutral, which means it can be applied to any type of IT environment, regardless of the hardware or software platforms in use. The standards are widely used by auditors as a framework for evaluating IT controls and processes, and they provide specific guidelines for implementing effective IT policies and procedures.

Question 12

Organizations are in a constant state of change,so the plan must be continually updated to account for changes.

Accepted Answer

Organizations face various internal and external factors that can necessitate changes in their plans, such as shifts in the market, new technologies, or changes in leadership. Therefore, plans must be continuously reviewed and adjusted to ensure they remain relevant and effective.

Question 13

The Plan-Do-Check-Act (PDCA)model is a tried and proven method that can be applied to general processes that have been identified for improvement.

Accepted Answer

The answer of The Plan-Do-Check-Act (PDCA)model is a tried and...

Question 14

For all AAA priority business functions,document all the resources needed to recover the business function within the recovery time objective: number of people,phones,files,desks,office space,faxes,computers,software,printers,and so on.

Accepted Answer

This statement is true. It is important to document all the resources needed for each AAA priority business function to ensure a smooth recovery process within the designated time frame.

Question 15

Enlightened organizations recognize that IT governance is not the responsibility of IT management but of executive management,including the board of directors.

Accepted Answer

IT governance involves the alignment of IT with business goals and the management of IT-related risks. It is a strategic responsibility that should be overseen by executives and the board of directors, as they are accountable for the overall performance and sustainability of the organization. IT management plays a supporting role in implementing and executing the IT governance framework.

Question 16

Many organizations combine the use of PDCA and an ITIL governance framework to get excellent results in their process improvement projects.

Accepted Answer

It is true that many organizations combine the use of PDCA (Plan-Do-Check-Act) and an ITIL (Information Technology Infrastructure Library) governance framework to achieve better results in their process improvement initiatives. PDCA is a cyclic method used to improve processes continuously, while ITIL is a set of best practices for managing IT services. The combination enables organizations to identify areas for improvement, design and test solutions, implement changes, and continuously monitor and evaluate processes to ensure they meet business objectives.

Question 17

An organization's executives are the only ones responsible for governance.

Accepted Answer

Governance is a shared responsibility among all members of an organization, including executives, board members, stakeholders, and employees. It involves making decisions and taking actions that align with the organization's mission, values, and strategic goals while ensuring compliance with legal and ethical standards. Effective governance requires collaboration, transparency, accountability, and continuous improvement across all levels of an organization.

Question 18

The COBIT process known as "Effective Continuous Service" describes how to create an effective disaster recovery plan.

Accepted Answer

The COBIT process known as "Effective Continuous Service" aims to ensure the continuity and availability of IT services, but it does not specifically address disaster recovery planning. COBIT does, however, provide guidance on IT disaster recovery planning through other processes such as "Ensure Risk Optimization" and "Manage Programs and Projects."

Question 19

The ITIL or COBIT governance frameworks provide an excellent set of best practices for various IT-related processes.

Accepted Answer

The ITIL and COBIT frameworks are widely recognized as leading IT governance frameworks that provide best practices for IT-related processes.

Question 20

One internal control might be that a company's purchasing department,accounts payable department,and IT systems not allowing the same person to authorize a major purchase and then approve its payment.

Accepted Answer

This is an example of segregation of duties, a common internal control measure to prevent fraud and errors. By separating the authorization and approval functions, no one person can have complete control over the process of purchasing and paying for goods or services, reducing the risk of abuse or mistakes.

Quiz 5: Corporate Governance and IT