Authentic Isaca Certification Exam CGEIT Questions Answers

Communicating the objectives and responsibilities to staff is the BEST way to demonstrate senior management’s commitment to IT governance. IT governance is the process of ensuring that IT supports the achievement of the organization’s goals and objectives, and delivers value to its stakeholders1. IT governance involves aligning the IT strategy, policies, processes, and resources with the business strategy, needs, and expectations2. However, implementing and sustaining IT governance requires a significant amount of change in the organization, such as introducing new technologies, standards, roles, and responsibilities3. Therefore, communicating the objectives and responsibilities to staff is essential for demonstrating senior management’s commitment to IT governance, as it can:

• Provide the direction and mandate for the IT governance initiative on an ongoing basis
• Communicate the vision, mission, goals, and objectives of the IT function to all stakeholders
• Allocate the necessary resources and capabilities to enable the IT governance processes and activities
• Monitor and evaluate the performance and outcomes of the IT function and provide feedback and recognition
• Foster a positive and collaborative culture that values IT as a strategic partner and enabler of the business

The other options are not as good as option C. While it is important to communicate the legal and regulatory requirements, the approved IT investment opportunities, and the need for enterprise architecture (EA), these are not sufficient to demonstrate senior management’s commitment to IT governance. They are rather means to achieve the end goal of implementing and sustaining IT governance. They do not necessarily reflect the level of commitment, involvement, and support from the management toward IT governance. References :=

• What is IT Governance? Definition & Examples | ASQ2
• What is IT governance? A formal way to align IT & business strategy1
• How to Involve Senior Management in the Information Security Governance …3

The best approach to ensure global regulatory compliance when implementing a new business process is to ensure the appropriate involvement of the legal department. The legal department is the function that provides legal advice and guidance to the organization on various matters, such as contracts, transactions, disputes, regulations, and compliance. By involving the legal department in the implementation of a new business process, the organization can ensure that the business process complies with the relevant laws, policies, and standards that apply in different countries and jurisdictions. The legal department can also help to identify and mitigate any legal risks or issues that may arise from the new business process, such as liability, litigation, or sanctions.

The other options are not as effective as ensuring the appropriate involvement of the legal department for ensuring global regulatory compliance when implementing a new business process. Using a balanced scorecard to track the business process is a good practice for measuring and evaluating the performance and value of the business process, but it does not guarantee compliance with global regulations. Reviewing and revising the business architecture is a necessary step for designing and aligning the business process with the business strategy and objectives, but it does not address the legal aspects of the business process. Seeking approval from the change management board is a relevant procedure for implementing a new business process, but it does not ensure that the change management board has the expertise or authority to assess and approve the global regulatory compliance of the business process.

The first step to address the concern of discrimination against certain demographic groups resulting from the use of machine learning models is to obtain stakeholders’ input regarding the ethics associated with machine learning. This is because stakeholders are the ones who are affected by or have an interest in the outcomes of machine learning models, and their input can help identify the ethical values, principles, and standards that should guide the development and use of machine learning models. Stakeholders’ input can also help ensure that the machine learning models are aligned with the enterprise’s mission, vision, and goals, as well as the legal and regulatory requirements. According to COBIT 5, one of the seven enablers of IT governance is stakeholders1. The Ethics and Governance of Artificial Intelligence project also emphasizes the importance of engaging with diverse stakeholders to ensure that AI systems are fair, accountable, transparent, and human-centric2. References := 1: COBIT 5: A Business Framework for the Governance and Management of Enterprise IT, ISACA, page 312: Algorithms and Justice - Berkman Klein Center