ISO 31000 dan ISO 38500

Which of the following is Risk Component

• An event that may or may not happen

• The probability of the occurrence of that event

• The impact of the occurrence of that event

• All answer are correct

Since risk is something that can bring negatif effect to the organization, every risk is owned. Risk that is not assigned, is owned by organization's ....

• Risk Manager

• IT Manager

• Business Manager

• Directors or Board of Directors

The domain of IT Risk can be visually represented as 4 intersecting landscapes of

• Threat

• Asset

• Impact

• All answer are correct

Which of the following is not standards and framework of IT Risk Management

• ISO 31000

• COSO ERM

• ISO 2700x

• TOGAF

Which of the following is true about the different COSO ERM vs ISO 31000

• COSO ERM is lengthy while the ISO 31000 is short

• COSO ERM stated risk already exist and inherent while ISO 31000 Risk tied to achieving objectives

• COSO ERM is more sequential process while ISO 31000 is more iterate process/PDCA

• All answers are correct

Which of the following is true for role of IT in organizations

• IT support the business organization

• IT enables the business organization

• IT drives the business organization

• All answers are correct

The author of the book IT Governance "specifying the decision rights and accountability framework to encourage desirable behavior in using iT

• Bill Gates

• Wim Van Grembergen

• Jeff Bezos

• Peter Weill & Jeanne W Ross

According to peterson model, which of the following is the main component of IT Governance

• Structure

• Process

• Relational Mechanism

• All answers are correct

Which of the following is the focus area of IT Governance that describe IT achieve benefit to the organization

• Strategic Alignment

• Risk Management

• Value Delivery

• Resource Management

According to ISO 38500 reference model for corporate governance of IT which of the following is not true for governance function processes/tasks

• Evaluate

• Direct

• Monitor

• PDCA