Question 11

(TCO B) COBIT controls that include acquiring new applications or staff skill sets are part of what COBIT domain?

Group of answer choices

Planning and Organizing

Delivery and Support

Monitoring

Acquisition and Implementation

Question 12

(TCO A) Which of the following has become the de facto standard for auditors regarding SOX compliance?

Group of answer choices

ITIL

Six Sigma

COBIT

There is no de facto standard

Question 13

(TCO C) Which of the following is not a risk strategy required under Solvency II?

Group of answer choices

Creating an effective reporting system

Installing early warning and monitoring tools

Setting up a review committee at the board of directors level

Changing existing internal risk management processes so they can be measured against the new requirements

Question 14

(TCO B) Controls that include defining a strategic IT plan and managing the IT investment are part of what COBIT domain?

Group of answer choices

Planning and Organizing

Acquisition and Implementation

Delivery and Support

Monitoring

Question 15

(TCO A) Section 404 of Sarbanes-Oxley requires executive management for which of the following?

Group of answer choices

A quarterly report on implemented internal controls

A report on the effectiveness of the internal control structure and procedures

The hiring of third party, independent review boards

Quarterly internal auditing drills