Exam 5: Corporate Governance and IT

The ____ requires all financial-services institutions to communicate their data privacy policies and honor customer data-gathering preferences.

COBIT is a set of decades-old standards that are highly regarded by auditors because they provide specific guidelines and are completely independent of any computer hardware or software platforms.

One internal control might be that a company's purchasing department,accounts payable department,and IT systems not allowing the same person to authorize a major purchase and then approve its payment.

The Plan-Do-Check-Act (PDCA)model is a tried and proven method that can be applied to general processes that have been identified for improvement.

Many organizations combine the use of PDCA and an ITIL governance framework to get excellent results in their process improvement projects.

For all AAA priority business functions,document all the resources needed to recover the business function within the recovery time objective: number of people,phones,files,desks,office space,faxes,computers,software,printers,and so on.

Identify five issues that corporate governance addresses.

In the ____________________ step of the Plan-Do-Check-Act model,the change decided in the Plan step is implemented,often on a pilot or limited basis to assess the potential impact of the proposed change(s).

The ____ provides direction and control during a disaster and operates from a secure emergency operations center equipped with emergency communications gear.

The ____ includes employees and nonemployee specialists who assess the situation once it is safe to do so.

The ____ prohibits corrupt payments to foreign officials for the purpose of obtaining or keeping business.

Organizations are in a constant state of change,so the plan must be continually updated to account for changes.

A(n)____________________ is an unplanned interruption of normal business operations for an unacceptable period of time.

Only floor wardens need to be trained to recognize and respond to various types of disaster warnings,such as those for fires,tornados,gas releases,and so on.

One good approach to backing up data in case of a disaster is to have employees take backup copies of vital data home at the end of the work day.

A(n)____________________ business function is critical to the operation of the firm and cannot be unavailable more than a few hours without causing severe problems.

____ is a set of guidelines whose goal is to align IT resources and processes with business objectives,quality standards,monetary controls,and security needs.

An organization's executives are the only ones responsible for governance.

An effective business continuity plan can be developed only after an organization's unique ___________________ are identified.

COBIT is an internationally accepted standard for IT governance and control practices.