Free CGEIT Isaca Updates

 Quantitative risk assessment is more objective than qualitative risk assessment because it uses numeric values and calculations to estimate the likelihood and impact of risks. Quantitative risk assessment is more appropriate when the risk assessment needs to be unbiased and consistent. References := ISACA, CGEIT Review Manual, 7th Edition, 2019, p. 90-91.

The first step in updating an IT strategic plan is to identify changes in enterprise goals. An IT strategic plan is a document that defines how the IT function supports the overall business strategy and objectives of an enterprise1. It should be aligned with and driven by the enterprise goals, which may change over time due to internal or external factors, such as market conditions, customer demands, competitor actions, regulatory requirements, or organizational changes2. Therefore, before updating the IT strategic plan, it is essential to identify and understand the changes in enterprise goals and their implications for IT. This will help to ensure that the IT strategic plan remains relevant, realistic, and effective in delivering value to the enterprise. References: CGEIT Review Manual (Digital Version) or CGEIT Review Manual (Print Version), Chapter 2: IT Resources, Section 2.1: IT Strategy Development and Maintenance, Subsection 2.1.1: IT Strategy Development Process, Page 55-56. What is an IT Strategic Plan?.

 According to the CGEIT exam guide, the IT resource management plan is a document that describes how the IT resources of an enterprise will be acquired, allocated, monitored and optimized to support the IT strategy, objectives and goals. The IT resource management plan should also address the human resource aspects of IT, such as recruitment, retention, development, motivation and performance of IT personnel. Therefore, the best governance action to address the concern of high turnover of skilled IT personnel is to update the IT resource management plan to reflect the current and future needs and challenges of the IT department. The updated IT resource management plan should include strategies and actions to reduce the turnover rate, such as improving the IT work environment and culture, offering competitive compensation and benefits packages, providing career development and training opportunities, enhancing employee engagement and recognition, and implementing knowledge management and succession planning practices. References: CGEIT Exam Candidate Guide, page 14. CGEIT Certification, IT Resource Management, Employee Turnover Rate: Definition & Calculation

 As this is the first step to understand the scope, objectives, and expectations of the new direction, as well as to align the IT project portfolio with the business needs and priorities. Asking business stakeholders to discuss their vision can also help identify and address any gaps or issues in the current IT project portfolio, as well as to communicate and collaborate effectively with the business units.

Canceling projects with a net present value (NPV) below a defined threshold, conducting a risk assessment against the potential new services, and starting re-allocating budget to projects involving mobile or cloud are possible actions to take after asking business stakeholders to discuss their vision, but they are not the first step. Canceling projects with a low NPV may help free up some funds for the new direction, but it may also affect the existing or planned benefits or outcomes of those projects. Conducting a risk assessment can help evaluate the feasibility and impact of the new services, as well as identify and mitigate any threats or uncertainties. Starting re-allocating budget can help support and enable the new services, but it may also disrupt or compromise the current or ongoing projects. These actions should be based on a clear and shared understanding of the new strategy and its implications for the IT project portfolio.