CGEIT Question 98

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Goals decide what KRIs are relevant.

• 1

  C. IT goals and objectives

• Chose A1

  Before establishing IT key risk indicators (KRIs), it is essential to define the IT risk and security framework. The risk and security framework outlines the structure, processes, policies, and methodologies that the organization will use to identify, assess, mitigate, and manage IT risks effectively. It provides the foundational structure within which KRIs are developed and implemented. By establishing a comprehensive risk and security framework, organizations can ensure consistency and alignment in their approach to managing IT risks. This framework helps define the scope of IT risk management activities, establish risk tolerance levels, and identify critical assets and vulnerabilities that need to be monitored through KRIs.