Align IT Strategy With Business Objectives - CPA Isc

1. A new regulation creates a stakeholder need for traceability. Under COBIT, what is the first cascade step?
   Answer: Treat it as an enterprise goal In COBIT, stakeholder needs enter at the top of the goals cascade, so a regulatory traceability need is first framed as an enterprise goal. From there you derive IT-related goals and then design factors. The tempting misstep is mapping an IT goal to a design factor immediately, but that skips the required first step of aligning the need to enterprise goals.
2. A company adopts a strategy to expand into new international markets. Which of the following IT strategy actions would best support this objective?
   Answer: Evaluating and implementing systems capable of supporting multi-currency, multilingual, and multi-regulatory requirements. International expansion requires IT systems that handle diverse currencies, languages, and regulatory environments. Proactively evaluating and implementing such systems directly aligns IT capabilities with the business objective. Answer B is correct. Budget cuts (A), hardware upgrades (C), and outsourcing (D) do not specifically address the international expansion objective.
3. Portfolio management in the context of IT governance refers to:
   Answer: Evaluating, prioritizing, and managing a collection of IT projects and investments as a whole to maximize value and strategic alignment. IT portfolio management treats the collection of IT initiatives as a portfolio, balancing risk and return across projects and ensuring collective alignment with business strategy. Answer A is correct. Financial investment portfolios (B), software asset management (C), and vendor contract review (D) are distinct activities.
4. Which of the following best describes the relationship between IT risk and business risk?
   Answer: IT risks can directly threaten the achievement of business objectives and must be managed as part of enterprise risk management. In most organizations, IT is deeply embedded in business operations, meaning IT risks (system failures, cyber incidents, data breaches) can directly affect the achievement of business objectives. Answer C is correct. Managing IT risk in isolation (A) or treating business risk as a subset of IT risk (B) misrepresents the relationship. IT risk is relevant across all industries (D).
5. An organization uses a formal IT demand management process. The primary purpose of this process is to:
   Answer: Capture, evaluate, and prioritize IT service and project requests from business units to ensure alignment with strategic priorities. IT demand management is the process by which requests for IT services and projects are collected, assessed, and prioritized based on strategic value and available capacity. Answer D is correct. Hardware refresh schedules (A), ticket tracking (B), and vendor SLA monitoring (C) are operational processes unrelated to demand management.
6. An organization's IT strategic plan should primarily be driven by which of the following?
   Answer: The organization's overall business strategy and objectives. IT strategy must be aligned with and derived from the organization's overall business strategy. Technology investments and priorities should enable and support business objectives. Answer C is correct. Budget allocation (A), IT department technology preferences (B), and industry benchmarks (D) are inputs or constraints but do not drive IT strategy - business objectives do.
7. IT budgets 80% to legacy systems despite a growth strategy. What best restores alignment?
   Answer: Map projects to strategy goals Mapping projects to strategy goals realigns IT spending by ensuring every investment supports the growth strategy. The tempting wrong answer is cutting legacy spend for new ideas, but that just shifts money without proving the new projects advance strategy. Alignment requires a strategic filter, not arbitrary cuts.
8. Which of the following best describes IT governance?
   Answer: The framework of policies, processes, and structures that ensures IT supports and enables the achievement of business objectives. IT governance encompasses the leadership, organizational structures, and processes that ensure IT sustains and extends the organization's strategy and objectives. Answer A is correct. Day-to-day IT operations (B), vendor selection (C), and security auditing (D) are operational activities that fall within the broader governance framework but do not define governance itself.
9. Which of the following is the primary purpose of an IT balanced scorecard?
   Answer: To measure IT performance across multiple dimensions - financial, customer, internal process, and learning - to assess alignment with business strategy. The IT balanced scorecard adapts Kaplan and Norton's framework to IT, measuring performance across financial, customer/stakeholder, internal process, and innovation dimensions to ensure IT is delivering strategic value. Answer C is correct. Security documentation (A), project completion tracking (B), and employee evaluation (D) are not the purpose of an IT balanced scorecard.
10. The chief information officer (CIO) reports directly to the CEO and regularly presents IT strategy updates to the board of directors. This governance structure most directly supports:
    Answer: Strong IT-business alignment by ensuring IT strategy receives executive and board-level oversight. CIO reporting to the CEO and board engagement with IT strategy are hallmarks of mature IT governance, ensuring IT priorities are understood and endorsed at the highest levels of the organization. Answer B is correct. Incident resolution speed (A), procurement efficiency (C), and IT autonomy (D) are not the primary outcomes of this governance structure.
11. An IT steering committee is best described as:
    Answer: A cross-functional body of senior business and IT leaders that provides oversight and strategic direction for IT investments and priorities. An IT steering committee brings together business and IT leadership to align IT investments with strategic priorities, approve major projects, and oversee IT governance. Answer A is correct. IT steering committees are strategic, not operational (B), internal rather than external (C), and not focused on single implementations (D).
12. A company's IT department consistently delivers projects on time and within budget, but senior management remains dissatisfied because the projects do not seem to address pressing business needs. This situation most likely indicates:
    Answer: A misalignment between IT strategy and business objectives. When IT projects are technically successful but fail to address business needs, the root cause is misalignment between IT priorities and organizational objectives. Answer B is correct. The projects are delivered on time and on budget, ruling out project management (A) or budget issues (C). Internal IT communication (D) is not the issue when the gap is between IT outputs and business needs.
13. When evaluating whether IT investments are aligned with business objectives, which of the following metrics is most appropriate?
    Answer: Business value delivered by IT initiatives relative to their cost. Alignment is best measured by the value IT creates for the business relative to its cost - a metric that directly ties IT activity to business outcomes. Answer D is correct. Server counts (A), headcount (B), and budget allocation percentages (C) are operational metrics that do not measure strategic alignment.
14. A company operating in a highly regulated industry is considering a major IT transformation. Which of the following should be the first step in developing the IT strategy for this transformation?
    Answer: Assessing current and future business objectives, regulatory requirements, and the existing IT landscape to identify gaps and opportunities. Effective IT strategy begins with a thorough understanding of business needs, regulatory obligations, and the current state of IT - identifying the gap between where the organization is and where it needs to be. Answer A is correct. Vendor selection (B), cost calculation (C), and staffing (D) are subsequent steps that follow strategic assessment.
15. Which of the following represents a characteristic of an effective IT strategic plan?
    Answer: It is derived from business strategy, sets measurable IT objectives, and is reviewed and updated regularly. An effective IT strategic plan is business-driven, contains measurable objectives, and is a living document reviewed regularly to adapt to changes. Answer B is correct. Excluding business unit input (A), focusing only on cost (C), or using a rigid long-term plan that is never revised (D) are characteristics of ineffective IT planning.
16. Which of the following is a key principle of the COBIT 2019 framework?
    Answer: A governance system for enterprise IT should meet stakeholder needs. COBIT 2019's first principle states that a governance system should meet stakeholder needs and produce value from IT investments. Answer C is correct. COBIT explicitly rejects separating IT governance from enterprise governance (B) and does not restrict IT decision-making to IT staff (A) or controls to high-risk environments (D).
17. Which of the following scenarios indicates strong IT-business alignment?
    Answer: Business unit leaders are actively involved in IT project prioritization, and IT metrics are tied to business outcomes. Strong alignment exists when business leaders participate in IT governance and IT performance is measured by its contribution to business outcomes. Answer B is correct. Independent IT decision-making (A), backward-looking budgeting (C), and purely technical evaluation (D) are indicators of misalignment.
18. In an IT balanced scorecard, which metric best links IT to a revenue-growth goal?
    Answer: Revenue from new IT products A revenue-growth goal must be measured by income generated, not by cost or operations. Revenue from new IT products directly shows IT's contribution to new business value. Server uptime is tempting as a core IT metric, but it only measures reliability, not growth in revenue. Training hours and budget savings are also efficiency or compliance metrics, not revenue drivers.
19. In the context of IT-business alignment maturity models, an organization that has ad hoc IT processes with no formal planning and alignment mechanisms would be classified at which maturity level?
    Answer: Initial IT-business alignment maturity models (such as the Luftman model) classify organizations from Level 1 (Initial/Ad Hoc) through Level 5 (Optimized). An organization with no formal planning or alignment mechanisms is at Level 1 - Initial. Answer D is correct. Optimized (A) is the highest level. Managed (B) and Defined (C) are intermediate levels requiring more mature processes.
20. Which of the following best describes the concept of IT value delivery in the context of IT-business alignment?
    Answer: Ensuring that IT investments produce measurable business benefits that justify their costs. IT value delivery means IT investments translate into tangible business benefits - revenue growth, cost savings, risk reduction, or competitive advantage - that justify the costs. Answer A is correct. Budget adherence (B), defect-free delivery (C), and maximizing service availability (D) are operational metrics, not measures of value delivery.

Start this quiz