CGEIT Question 76

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Data security is highly regulated in financial institutions. Using SaaS is a major decision; the security must match their standards and the regulation. So if the vendor does not match the security requirements, there is no point in building a business case

• Chose C1

  C. Develop a business case. Before making any decisions regarding the use of a Software as a Service (SaaS) cloud vendor, it's essential to develop a business case. Developing a business case involves identifying the specific needs and requirements of the regional business unit, assessing the potential benefits and risks of implementing the new system via a SaaS cloud vendor, estimating costs, and evaluating alternatives. Once the business case is developed, it provides a foundation for decision-making and allows stakeholders to assess whether investing in a SaaS cloud vendor aligns with the organization's strategic objectives and budget constraints.

• 1

  Updating the outsourcing policy (option A) might be necessary eventually but should not be the first step in the process. Investigating on-premise software solutions (option B) is premature before understanding the business case for the SaaS cloud vendor. Determining if the cloud vendor has a secure data center (option D) is important but should come after establishing the business case and evaluating other factors.