Section 11.96 Governance

Question 1

Governance

Answer 1

■ Part of the GRC triad (Governance, Risk, and Compliance)

The strategic leadership, structures, and processes ensuring IT aligns with business objectives and regulatory requirments. This framework includes the rules, responsibilities and practicies that guide an organisation in achieving its goals and managing its IT resources.

Involves risk management, resource allocation, and performance measurement

Question 2

Purpose of Governance

Answer 2

Establishes a strategic framework aligning with objectives and regulations

■ Defines rules, responsibilities, and practices for achieving goals and managing IT resources

Question 3

4 points

Influence on IT Components

Answer 3

■ Shapes guidelines for recommended approaches in handling situations

■ Drives policy development, outlining organizational commitments (e.g., data
protection)

■ Impacts standards, defining mandatory rules for policy adherence

■ Ensures procedures align with objectives, providing task-specific guidance

Question 4

Adaptation and Revision

Answer 4

Governance must adapt to technological advancements, regulatory changes, and industry culture shifts

■ Monitoring evaluates governance effectiveness and identifies gaps through reviews

■ Revision updates governance framework