Skip to content
Solved Assignments

IT Governance and Compliance: COBIT, Sarbanes-Oxley, and Risk Management

Analysis of IT governance frameworks and compliance strategies.

Preview 3 of 8 pages

See the first 3 pages exactly as they appear in the document.

  1. Page 1
    Read page 1 as text

    IT Governance and Compliance: COBIT, Sarbanes - Oxley, and Risk Management Grade Details - All Questions Page: 1 2 Question 1. Question : (TCO A) Section 302 of Sarbanes - Oxley requires executive management to do which of the following? Student Answer: Establish and maintain internal controls Setup external review processes Create an internal board of compliance Setup periodic internal audits Instructor Explanation: Points Received: 4 of 4 Comments: Question 2. Question : (TCO B) Planning and Organization domain control objective 9 of the COBIT standard does not __________. Student Answer: provide for a business risk assessment provide for risk identification provide for development of a risk action plan place the CEO in a role responsible for IT and business risk management alignment Instructor Explanation: Points Received: 0 of 4 Comments: Question 3. Question : (TCO C) In COBIT, the Domain acronyms PO, AI, DS, and ME are? Student Answer: Purchase and Originate, Artificial Intelligence, Directory Services, and Monitor and Evaluate. Plan and Organize, Acquire and Implement, Deliver and Support, and Monitor and Evaluate. Plan and Organize, Artificial Intelligence, Deliver and Support, and Maintain and Execute. Purchase and Originate, Acquire and Implement, Directory Services, and Maintain and Execute. Instructor Explanation: Points Received: 4 of 4

  2. Page 2
  3. Page 3
    Read page 3 as text

    Comments: Question 4. Question : (TCO A) The three types of information system administrative controls are __________. Student Answer: confidentiality, integrity, and availability confidentiality, integrity, and access completeness, integrity, and availability completeness, innovation, and availability Instructor Explanation: Points Received: 4 of 4 Comments: Question 5. Question : (TCO B) Which law requires organizations to keep physical control of paper documents and control of electronic documents? Student Answer: Sarbanes - Oxley HIPAA The Federal Financial Management Improvement Act of 1986 SAS 70 Instructor Explanation: Points Received: 4 of 4 Comments: Question 6. Question : (TCO A) What is one of the ways IT does not deliver value to an organization? Student Answer: Speed to market Global reach Competitive advantage Cost of technology Instructor Explanation: Points Received: 4 of 4 Comments: Question 7. Question : (TCO C) A Personal Private Information (PPI) policy does which of the following? Student Answer: Determines what constitutes PPI and how it must be secured and maintained

5 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Information Technology study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.