Certified in the Governance of Enterprise IT (CGEIT) — Question 129

When assessing the impact of a new regulatory requirement, which of the following should be the FIRST course of action?

Answer options

• A. Update affected IT policies.
• B. Implement new regulatory requirements.
• C. Assess the budget impact of the new regulation.
• D. Map the regulation to business processes.

Correct answer: D

Explanation

The correct answer is D because mapping the regulation to business processes is essential for understanding how it will affect operations and compliance. The other options, while important, should follow once the regulation's implications on business processes are fully understood.