IT Governance and Compliance: COBIT, Sarbanes-Oxley, and Risk Management

Analysis of IT governance frameworks and compliance strategies.

Chloe Martinez
Contributor
5.0
37
5 months ago
Preview (3 of 8 Pages)
100%
Purchase to unlock

Page 1

IT Governance and Compliance: COBIT, Sarbanes-Oxley, and Risk Management - Page 1 preview image

Loading page image...

IT Governance and Compliance: COBIT, Sarbanes-Oxley, and Risk ManagementGrade Details-All QuestionsPage:12Question1.Question :(TCO A) Section 302 of Sarbanes-Oxley requires executivemanagement to do which of the following?Student Answer:Establish and maintain internalcontrolsSetup external review processesCreate an internal board of complianceSetup periodic internal auditsInstructorExplanation:Points Received:4 of 4Comments:Question2.Question :(TCO B)Planning and Organization domain control objective 9 of theCOBIT standard does not __________.Student Answer:provide for a business risk assessmentprovide for risk identificationprovide for development of a risk action planplace the CEO in a role responsible for IT and business riskmanagement alignmentInstructorExplanation:Points Received:0 of 4Comments:Question3.Question :(TCO C) In COBIT, the Domain acronyms PO, AI, DS, and ME are?Student Answer:Purchase and Originate, Artificial Intelligence, Directory Services,and Monitor and Evaluate.Plan and Organize, Acquire and Implement, Deliver and Support,and Monitor and Evaluate.Plan and Organize,Artificial Intelligence, Deliver and Support, andMaintain and Execute.Purchase and Originate, Acquire and Implement, DirectoryServices, and Maintain and Execute.InstructorExplanation:Points Received:4 of 4

Page 2

IT Governance and Compliance: COBIT, Sarbanes-Oxley, and Risk Management - Page 2 preview image

Loading page image...

Page 3

IT Governance and Compliance: COBIT, Sarbanes-Oxley, and Risk Management - Page 3 preview image

Loading page image...

Comments:Question4.Question :(TCO A) The three types of information system administrative controlsare __________.Student Answer:confidentiality, integrity, and availabilityconfidentiality, integrity, and accesscompleteness, integrity, and availabilitycompleteness, innovation, and availabilityInstructorExplanation:Points Received:4 of 4Comments:Question5.Question :(TCO B) Which law requires organizations to keepphysical control ofpaper documents and control of electronic documents?Student Answer:Sarbanes-OxleyHIPAAThe Federal Financial Management Improvement Act of 1986SAS 70InstructorExplanation:PointsReceived:4 of 4Comments:Question6.Question :(TCO A) What is one of the ways IT does not deliver value to anorganization?Student Answer:Speed to marketGlobal reachCompetitive advantageCost oftechnologyInstructorExplanation:Points Received:4 of 4Comments:Question7.Question :(TCO C) A Personal Private Information (PPI) policy does which of thefollowing?Student Answer:Determines whatconstitutes PPI and how it must be secured andmaintained
Preview Mode

This document has 8 pages. Sign in to access the full document!

Study Now!

XY-Copilot AI
Unlimited Access
Secure Payment
Instant Access
24/7 Support
Document Chat

Document Details

Related Documents

View all