PDF CGEIT Study Guide

 Ensuring IT risk management is aligned with business risk appetite is the primary ongoing responsibility of the IT governance function related to risk, as it helps to ensure that the IT risks are consistent with the enterprise’s objectives, strategy, and tolerance for risk. IT risk management alignment also facilitates the integration of IT risk management with enterprise risk management (ERM), and the communication and reporting of IT risk to the relevant stakeholders123. References := CGEIT Exam Content Outline, Domain 4, Subtopic B: IT Risk Management, Task 1: Ensure that an IT risk management framework exists to identify, analyze, mitigate, manage, monitor, and communicate IT-related business risk, and that the framework for IT risk management is in alignment with the enterprise risk management (ERM) framework.

 A balanced scorecard is a strategic management tool that measures and monitors the performance of an organization against its vision, mission, goals, and objectives. It uses four perspectives: financial, customer, internal process, and learning and growth. A balanced scorecard can help demonstrate the effectiveness of the IT reorganization by showing how the IT function has improved in terms of delivering value to the business, satisfying customer needs and expectations, optimizing internal processes and workflows, and enhancing the skills and capabilities of the IT staff. According to one of the web search results1, “a balanced scorecard can help evaluate the effectiveness of IT governance by aligning IT activities with business strategies, assessing IT value delivery, identifying IT strengths and weaknesses, and facilitating continuous improvement.” The number of help desk calls, a survey of IT staff, and IT cost reduction are not the best indicators of the effectiveness of the IT reorganization. They are more likely to reflect operational or tactical aspects of IT service delivery, rather than strategic or holistic ones. They may also be influenced by other factors that are not related to the IT reorganization, such as user behavior, staff morale, or market conditions. References := Service Delivery for IT and Business | Splunk

 The CIO should reevaluate the current IT strategy in light of the senior management’s decision to expand offshoring to include IT services. This means that the CIO should assess the impact of offshoring on the existing IT objectives, plans, resources, capabilities, risks, and performance. The CIO should also consider the potential benefits and challenges of offshoring IT services, such as cost reduction, access to talent, quality assurance, communication, coordination, and security. The CIO should then revise the current IT strategy to align with the enterprise’s offshoring strategy and goals, and communicate the changes to the relevant stakeholders

 Information architecture (IA) is the practice of structuring and presenting the parts of something — whether that’s a website, mobile app, blog post, book, or brick-and-mortar store — to users so that it’s easy to understand. IA can help users find information and complete tasks1.

An enterprise that has ineffective information architecture may suffer from poor business decisions, because it may not be able to access, analyze, or use the data and information that are relevant, accurate, consistent, and timely for decision making. Poor business decisions can lead to negative consequences, such as losing customers, market share, revenue, or competitive advantage, or facing legal, financial, reputational, or operational risks23.

Some examples of how ineffective information architecture can impact business decisions are:

• If the enterprise’s website has a confusing or inconsistent navigation system, users may not be able to find the information they need or want, such as product details, prices, reviews, or contact information. This can result in lower customer satisfaction, engagement, conversion, and retention14.
• If the enterprise’s data is stored in multiple systems or platforms that are not integrated or interoperable, users may not be able to access or share the data across different departments or functions. This can result in data silos, duplication, inconsistency, or incompleteness25.
• If the enterprise’s data is not labeled or categorized properly, users may not be able to search or filter the data effectively. This can result in data overload, irrelevance, or obscurity25.
• If the enterprise’s data is not governed or managed properly, users may not be able to trust or verify the data quality or integrity. This can result in data errors, inaccuracies, or biases25.

Therefore, an enterprise that has ineffective information architecture may have poor business decisions as its greatest impact. References: Information Architecture Basics | Usability.gov. The Importance of Information Architecture to UX Design. How Enterprise Architecture Can Help You Eliminate Technical Debt. What Is Information Architecture & Why Does It Matter? - HubSpot Blog. Why Do We Need Information Architecture - Architecture.