What is typically not included in the process of examining IT environments?

• IT strategy

• Organisational business strategy

• IT support and services

• IT infrastructure

• IT competencies of employees

What are the typical objectives of examining IT environments? (Select all that apply)

• To identify the main challenges and problems

• To analyse IT problems and the associated risks

• To identify employees who should be made redundant

• To suggest actionable solutions or improvement plans for the IT issues identified

What types of organisations can leverage the benefits of IT environment testing methodology?

• Only large organisations

• Only small and medium-sized enterprises (SMEs)

• All types of organisations

What investigation techniques are typically applied when examining IT environments? (Select all that apply)

• Interviews

• Questionnaires

• Workshops

• Business process modelling

How can scenarios be beneficial during workshops with the organisational management? (Select all that apply)

• To evaluate the IT competencies of the stakeholders

• To validate the results of the initial investigation and analysis

• To blame particular employees for the organisational IT issues

• To estimate the organisational readiness for changes

Select the correct statement from the following.

• An IT environment can be effective but inefficient at the same time

• Effectiveness and efficiency of an IT environment mean the same thing

• An ineffective IT environment is also always efficient

Identify the key risk dimensions. (Select all that apply)

• Probability

• Source

• Impact

• Cost

Identify the risk management strategies. (Select all that apply)

• Risk reduction

• Risk avoidance

• Risk negligence

• Risk acceptance

What does the risk retention strategy mean?

• The organisation is looking for ways to avoid the risky situation

• The organisation does nothing about the risk

• The organisation prepares resources to deal with the risky situation

• The organisation buys insurance to cover possible damage

What could be the sources of IT risks in organisations? (Select all that apply)

• Software

• Hardware

• IT management processes

• People