Certified in the Governance of Enterprise IT (CGEIT) — Question 16

When designing an IT governance framework, the PRIMARY consideration should be to:

Answer options

• A. comply with external monitoring standards.
• B. ensure stakeholders receive value from IT.
• C. require cost-benefit analysis before implementing controls.
• D. benchmark controls against industry best practices.

Correct answer: C

Explanation

The correct answer is C because requiring a cost-benefit analysis ensures that any controls implemented provide a justified return on investment. Options A and D are important but secondary to ensuring that the controls are financially viable, while option B, although crucial for stakeholder satisfaction, does not directly address the governance framework's establishment.