Certified in the Governance of Enterprise IT (CGEIT) — Question 58

An enterprise has recently experienced an excessive number of exceptions due to outdated control frameworks. What should the leadership team do FIRST?

Answer options

• A. Mandate a reassessment of the current control frameworks.
• B. Review the IT control standards.
• C. Mandate strict adherence to control frameworks.
• D. Update the exception review and approval process.

Correct answer: B

Explanation

The correct answer is B because reviewing the IT control standards is essential to identify the specific weaknesses in the current frameworks. Options A, C, and D are reactive measures that may not address the root cause of the problem, which is the outdated standards themselves.