Certified in the Governance of Enterprise IT (CGEIT) — Question 133

Senior management has made a decision to automate a number of key controls due to concerns that current IT risk controls are overly cumbersome and adversely impacting IT agility. Which of the following should be required FIRST to facilitate this process?

Answer options

• A. Control gap analysis
• B. Control self-assessments
• C. Controls optimization
• D. Cost-benefit analysis

Correct answer: D

Explanation

A cost-benefit analysis is crucial to determine whether automating controls will be financially viable and beneficial. Without understanding the costs versus the benefits, implementing changes could lead to ineffective adjustments. The other options, while important, should follow once the financial implications are assessed.