An enterprise has decided to implement an IT risk management program. After establishing stakeholder desired outcomes, the MAIN goal of the IT strategy committee should be to:

A. perform a risk analysis on key IT processes.

B. ensure IT risk alignment with enterprise risk.

C. identify business data that requires protection.

D. implement controls to address high risk areas.








 

Suggested Answer: B

Community Answer: B



This question is in CGEIT Certified in the Governance of Enterprise IT Exam
For getting Certified in the Governance of Enterprise IT (CGEIT) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.