CMPE Organizational Governance Practice Test

These questions are part of the practice quiz. Start practicing

• What is service level governance?
• How should governance integrate with risk management processes?
• If a governing body does not review organizational performance metrics, which responsibility is neglected?
• Which of the following best describes the key elements of vendor governance?
• During which stage of a policy lifecycle is training and enforcement typically conducted?
• Which governance component provides objective assurance on risk management, control effectiveness, and governance processes?
• Which concept describes the origin and transformations of data as it moves through systems, enabling traceability, quality, and compliance?
• Which component belongs in an IT risk register?
• Why is diversity of skills important on a board?
• Explain the difference between data ownership and data stewardship.
• Which statement best describes data minimization in privacy governance?
• Which of the following is NOT a component of the IT investment governance process?
• A governing body fails to succession-plan for executive leadership. What governance risk exists?
• In the context of governance, which statement best describes architectural debt?
• Which action most strengthens board independence and decision quality?
• What governance risk arises when a governing body does not receive regular compliance reports?
• A board member attempts to influence hiring decisions. What governance boundary is crossed?
• What action most strengthens stakeholder accountability?
• When a governing board fails to align strategy with community needs, what governance responsibility is neglected?
• What governance improvement is needed when a board lacks diversity of skills and perspectives?
• A board does not evaluate its own performance. What governance best practice is missing?
• How does SOX influence organizational governance?
• Which of the following is a data quality dimension?
• A physician-owned practice lacks separation between ownership and governance. What governance risk arises?
• A governing board approves budgets but does not monitor financial performance. What governance failure occurred?
• Which COBIT principle stresses end-to-end governance across the enterprise?
• What is the role of data profiling in data quality management?
• How does governance relate to strategy and objective setting?
• If a board routinely rubber-stamps management recommendations, what governance weakness is most evident?
• Describe the difference between inherent risk and residual risk.
• How do regulatory requirements shape governance frameworks?
• What governance failure occurred when a board approves strategic partnerships without due diligence?
• Which of the following best explains the primary purpose of data lineage in governance?
• If a board approves a strategic plan but fails to establish metrics or timelines, which governance gap is most evident?
• Which aspect best characterizes cloud governance compared to traditional on-prem governance?
• If a board allows management to set its own oversight rules, what governance issue arises?
• Which statement best describes the relationship between IT risk management and business goals?
• If strategy is not aligned with community needs, which governance area is primarily at fault?
• Which mechanism best embeds ethics into governance to reduce risk-taking and improve accountability?
• What governance distinction is MOST relevant when there is conflict between physician owners and management over daily operations?
• Which situation demonstrates a risk of delayed decisions due to unclear escalation paths?
• Which governance principle is violated when a director uses confidential information for a personal venture?
• In data governance, which concept is explicitly listed as a key component along with policies and standards, metadata, and lifecycle management?
• Which rights are commonly emphasized by data protection regulations such as GDPR and CCPA?
• What governance structure is missing when a practice lacks formal policies for board decision-making?
• Which elements are core steps in vendor risk management within governance?
• Which statement best describes data stewardship assignments?
• Which practice best supports board accountability for quality outcomes?
• A board member has a financial interest in a vendor contract. What governance action is required?
• Which statement best describes the COSO internal control components?
• Which COBIT principle encourages adopting a holistic approach to governance?
• What governance issue exists when a board chair dominates discussions and suppresses dissent?
• Which action best maintains alignment between strategy and resources?
• What is the role of an incident response plan in cybersecurity governance?
• Which COBIT domain focuses on delivering value from IT investments and ensuring alignment with business goals?
• Which sequence represents policy lifecycle management?
• What duty is neglected when a governing body fails to address underperforming executives?
• Which of the following is a common cybersecurity governance metric?
• How should governance respond to regulatory changes?
• What is the role of an ethics policy in governance?
• A governing body makes decisions without adequate data. Which governance principle is violated?
• Which practice helps ensure lawful operations by clarifying obligations for the board?
• What does privacy by design entail in governance?
• How does data governance relate to governance frameworks, and what are its core artifacts?
• Which function in the Three Lines of Defense model provides risk management oversight, policy guidance, and monitoring?
• Which statement best defines architecture governance?
• Which artifact is a core artifact of data governance?
• Achieving alignment among mission, quality, and finance requires which governance focus?
• Which COBIT principle emphasizes using a single, integrated framework?
• Continuity planning primarily addresses which risk in governance?
• What are the core steps in vendor risk management within governance?
• What is data lineage and why is it important in data governance?
• A new board member wants to represent personal interests in decisions. What governance principle is violated?
• If leadership transitions are not planned, what risk increases?
• Portfolio governance determines project selection by evaluating which factors?
• A board does not address conflicts between committees. What governance responsibility is neglected?
• What does 'resource optimization' mean in IT governance?
• In governance, what does data minimization mean?
• Which governance responsibility ensures resources are used to uphold the organization's mission?
• A governing body lacks clarity on decision escalation. What governance risk exists?
• When a board member acts beyond granted authority, which governance principle is breached?
• What is architectural debt or tech debt and how should governance handle it?
• Why is vendor risk a concern in cloud governance?
• Why is documentation discipline essential in governance?
• A board chair makes unilateral decisions without consultation. What governance issue arises?
• Not periodically evaluating governance processes is a failure of what best practice?
• What is risk appetite alignment and how is it communicated to the organization?
• What does least privilege imply in IAM governance?
• In the Three Lines of Defense model, what is the role of the external auditor?
• What is a data governance council?
• Why is establishing a governance calendar or cadence important?
• Which statement best describes how governance, risk, and compliance relate to one another?
• What is a data steward responsible for?
• Which statement is true about commonly used governance maturity models?
• What constitutes an effective internal control environment in governance?
• Why is disaster recovery testing and why is it required?
• What is the purpose of an IT risk register?
• In COBIT 2019, what does separating governance from management mean?
• Who is typically responsible for ensuring data quality and adherence to standards within data governance?
• How does sustainability governance integrate with corporate governance?
• Failing to address known compliance violations can lead to what consequence?
• What does governance address regarding records retention and disposal?
• What is the role of the Audit Committee in governance?
• What does the COBIT domain 'Value Delivery' focus on?
• Regular board self-assessment helps achieve which outcome?
• A practice has no formal committee structure as complexity grows. Which governance improvement is needed?
• A governing body fails to update bylaws as the organization evolves. What risk arises?
• Define data governance and identify its key components.
• Which statement best describes ethical oversight in governance?
• What governance breakdown occurs when a practice expands rapidly without board approval?
• What governance gap exists when a governing body ignores stakeholder feedback?
• A practice lacks a clear mission statement. What governance impact results?
• How should governance reporting promote stakeholder transparency?
• A board does not monitor patient safety events. Which governance responsibility is unmet?
• What is the purpose of a governance charter?
• What governance standard is violated when a board member frequently misses meetings?
• A practice's board does not evaluate risk exposure. What governance gap exists?
• What objective does IT portfolio governance serve?
• Which element is typically included in ethical governance to protect stakeholders?
• When a board does not ensure ethical standards are enforced, which governance duty is unmet?
• A board systemically fails to address underperforming executives. Which governance duty is neglected?
• What governance risk arises when meeting minutes are not documented?
• What is the purpose of an independent internal audit function?
• In organizational governance, which statement best explains its relationship to risk management and strategy?
• What governance risk arises when a board focuses on short-term results at the expense of long-term viability?
• What governance weakness exists when a governing body lacks orientation for new members?
• Which mechanism helps ensure that a board does not exceed its granted authority?
• What is change control and why is it critical in project governance?
• Which outcome indicates a failure of risk oversight?
• Which set best describes the key components of IT security governance?
• What is the purpose of an escalation path in governance?
• What components support ongoing assurance in IT security governance?
• Which standard provides guiding principles for the governance of IT, emphasizing board and senior management accountability for IT?
• Which statement best defines IT service governance and its relation to SLAs?
• A governing body approves a strategic plan but does not track progress. What governance gap exists?
• What is an ethical risk in governance?
• Which of the following is commonly found as a board committee in many governance structures?
• Which of the following is NOT one of COBIT's five principles?
• What is the purpose of governance documentation and why is it maintained?
• Which scenario best illustrates a risk of concentrating authority with the board chair?
• Which practice best supports governance alignment with strategy?
• What is a likely consequence when governance policies and procedures are not formalized?
• What term describes the need for all governance parts to work together coherently?
• What is the role of metadata management in governance?
• If a board does not periodically review governance effectiveness, what best practice is missing?
• Which statement best describes privacy by design?
• What is the primary role of a steering committee in project governance?
• The failure to plan for leadership transitions at key board roles is best described as which weakness?
• Which IT governance framework emphasizes value delivery, risk optimization, resource management, and performance measurement?
• A board member publicly criticizes board decisions. Which governance issue arises?
• A board focuses exclusively on financial results and ignores mission. What governance imbalance exists?
• What does quality assurance governance involve in software development?
• What do shared responsibility models in cloud governance define?
• Which elements are essential in governing data quality?
• How do you assess governance maturity?
• What governance gap exists when policies do not align with organizational values?
• Which term describes the board’s obligation to oversee management and hold it accountable for results?
• What is the purpose of records management in governance?
• What should an IT risk register include?
• Which governance area is most at risk when a practice ignores compliance signals and regulatory reports?
• What is change governance in software development responsible for?
• Differentiate between inherent risk and residual risk with an example.
• Regular evaluation of governance processes is essential for what purpose?
• Lack of regular performance oversight by the board tends to increase which risk?
• Which statement best captures how governance should treat stakeholder expectations?
• A practice lacks written bylaws defining board roles. What governance risk exists?
• How do ethics and culture influence governance effectiveness?
• What is a risk appetite statement and why is it important in governance?
• What methods drive continuous governance improvement?
• Which concept is fundamental to data privacy governance?
• A board fails to review quality and patient safety data. What governance responsibility is neglected?
• What is the purpose of business continuity planning, and what governance aspects does it involve?
• When a governing body ignores compliance reports, which governance responsibility is neglected?
• Why is staff training and awareness important in governance?
• Neglecting ethical standards by the board most directly undermines which outcome?
• What governance problem exists when a board routinely involves itself in staff scheduling decisions?
• What does 'risk optimization' entail in IT governance?
• Which COBIT principle focuses on separating governance from management?
• Which statement best describes the governance emphasis of GDPR compared to CCPA, and a common requirement they share?
• What is the purpose of corporate governance and how does IT governance relate?
• Which activity ensures business operations can continue during disruptions?
• A board member discloses confidential board discussions publicly. What duty is violated?
• What is the relationship between governance and risk appetite?
• Explain the role of the board's Audit Committee.
• When a board does not align policies with organizational values, what governance gap exists?
• What are the four key components of an IT governance framework like ISO 38500?
• What is architecture governance?
• Which responsibility is unmet when a governing board does not oversee quality improvement initiatives?
• Which governance duty involves setting and enforcing ethical tone across the organization?
• Which of the following is a key component of data governance?
• Which aspects are typically overseen by AI governance?
• What is a compliance monitoring program?
• What is a risk heat map and what is it used for?
• Which of the following is a data quality dimension?
• What is a risk appetite statement and how does it influence governance decisions?
• What process improves board accountability and transparency?
• What is continuous governance improvement and how is it achieved?
• Which COSO ERM component addresses governance structure, culture, and ethical values that influence how risk is managed?
• What best practice strengthens governance performance over time?
• What is the primary purpose of data lifecycle management in governance?
• What does 'resource optimization' mean in IT governance?
• Which statement best describes IAM governance?
• What is contract governance?
• Explain crisis management governance and business continuity planning?
• Explain the concept of decision rights and RASCI in governance.
• What is a Privacy Impact Assessment (PIA) and when is it typically used?
• Which governance principle applies when a medical group's board asks the administrator to clarify who has authority over strategic direction?
• Which governance improvement most strengthens independent oversight of board decisions?
• What does data residency concern in cloud governance?
• How do you ensure stakeholder engagement in governance?
• What governance risk exists when compensation for executives is approved without benchmarks?
• If a practice's governing body ignores succession risks for key board roles, what governance weakness exists?
• In cybersecurity governance, which metric reflects the speed of detecting and resolving security issues?
• A board approves strategic initiatives without resource planning. What governance failure exists?
• What does supply chain security governance involve?
• Which of the following is NOT typically considered a policy enforcement mechanism in governance?
• Which framework provides a comprehensive IT governance model emphasizing value delivery, risk optimization, resource management, and performance measurement?
• A governing body lacks clarity on legal obligations. What governance improvement is needed?
• Which statement about metadata in governance is true?
• Which statement best describes data privacy governance?
• How should data quality be governed and measured?
• What are the stages of a policy lifecycle?
• What best describes ethical governance and its importance?
• How should governance handle conflicts of interest?
• Which approach is used to measure IT value and performance under governance?
• What is the difference between required and recommended controls?
• What are the critical elements of an incident response governance plan?
• What is the purpose of a due diligence process in partnerships?
• What best defines enterprise risk tolerance?
• What is the purpose of MTTR as a cybersecurity metric?
• A practice has unclear voting procedures. What governance risk results?
• Explain architecture governance and its benefits.
• A board member bypasses the administrator and gives staff direct instructions. What governance principle is violated?
• In the Three Lines of Defense model, what are the primary responsibilities of the first line (operational management) versus the second line (risk management and compliance)?
• Which statement best describes incident response in IT security governance?
• What is one formal mechanism to engage stakeholders in governance?
• When a governing board fails to align strategy with community needs, this results in a lack of which governance element?
• What is SAFe/AGILE governance in software development?
• What is the purpose of a risk register and how is it used in governance?