110323 - Trial Questions For Exam Two

Some Practice Questions For Exam Two Bruce C. Barnes bbarnes@bold-vision.com Barnes.536@osu.edu Office Hours - By Appointment (614) 595-4404 -- Cell AMIS 4670 – Information Systems Planning and Management Autumn 2023

Suggested Areas To Concentrate Suggested Areas To Concentrate On On 1. 1. The value and layered structure of enterprise architectures, and how they tie back to The value and layered structure of enterprise architectures, and how they tie back to the relationships between data and information. the relationships between data and information. 2. 2. The phases of organizational maturity. The phases of organizational maturity. 3. 3. The elements of adaptive digital readiness and customer centricity. The elements of adaptive digital readiness and customer centricity. 4. 4. The needs and approaches to effective strategy development. The needs and approaches to effective strategy development. 5. 5. Project prioritization elements within an effective enterprise. Project prioritization elements within an effective enterprise. 6. 6. The relationships between strategic management, portfolio management, program The relationships between strategic management, portfolio management, program management and project management. management and project management. 7. 7. The system implementation process and its four (4) sub-processes. The system implementation process and its four (4) sub-processes. 8. 8. The types of budgeting and financial management related to IT. The types of budgeting and financial management related to IT. 9. 9. Understanding the components of the Trust Services Framework. Understanding the components of the Trust Services Framework. 10. 10. Understanding the elements of the Enterprise Risk Management Framework. Understanding the elements of the Enterprise Risk Management Framework. 11. 11. Understanding the different types of controls associated with risk mitigation and Understanding the different types of controls associated with risk mitigation and management. management. 12. 12. Performance assessment and Balanced Scorecared Performance assessment and Balanced Scorecared

With further regard to the topic of Enterprise Architecture, please whether each of the following statements is True or False . _____ _____ a) a) Enterprise Architectures are a means to help make clear up front how the Enterprise Architectures are a means to help make clear up front how the desired states of compliance are to be both facilitated and assured. desired states of compliance are to be both facilitated and assured. _____ _____ b) b) Enterprise Architectures are needed Enterprise Architectures are needed to help assure some measure of rigor and to help assure some measure of rigor and consistency in how processes are created, managed, evolved and value consistency in how processes are created, managed, evolved and value focused. focused. _____ _____ c) c) Enterprise Architecture are typically there by corporate mandate in much the Enterprise Architecture are typically there by corporate mandate in much the same way that there is for Internal Audit. same way that there is for Internal Audit. _____ _____ d) d) Enterprise Architectures come together in a layered form. Enterprise Architectures come together in a layered form. _____ _____ e) e) Enterprise Architectures are designed to help link together the non-technical Enterprise Architectures are designed to help link together the non-technical business elements with the logical models of the data/information that business elements with the logical models of the data/information that supports them. supports them.

In our discussion of IT Strategy development, we said you need to start by understanding that forces that shape competition within your industry. Doing so is your starting point in better positioning yourself through a responsive IT Strategy. We said that needed “positioning” builds your defenses against those forces by answering six (6) questions. Which of the following was NOT one of them? _____ _____ a) a) FOR FOR ........................ (who is your target?) ........................ (who is your target?) _____ _____ b) b) WHO MUST WHO MUST ............ (what are ............ (what are they they trying to do?) trying to do?) _____ _____ c) c) OUR PRODUCT IS OUR PRODUCT IS …….(what do …….(what do you you provide to them?) provide to them?) _____ _____ d) d) THAT PROVIDES THAT PROVIDES .......... (what will that .......... (what will that do do for them?) for them?) _____ _____ e) e) UNLIKE UNLIKE ......................... (why is it their best choice?) ......................... (why is it their best choice?) _____ _____ f) f) DIFFERENTIATED BY DIFFERENTIATED BY ..(what is your unique advantage?) ..(what is your unique advantage?) _____ _____ g) g) DEVELOPED BY DEVELOPED BY ………(who participated in its creation?) ………(who participated in its creation?)

The Systems Implementation process is comprised of four (4) sub-processes. Which of the following is NOT one of them. ____ (a) Balancing of overall resources and needs. ____ (a) Balancing of overall resources and needs. ____ (b) Follow-up and post-implementation evaluation. ____ (b) Follow-up and post-implementation evaluation. ____ (c) Governance priorities with regard to sponsorship and resource compliance. ____ (c) Governance priorities with regard to sponsorship and resource compliance. ____ (d) Establishing plans and associated controls. ____ (d) Establishing plans and associated controls. ____ (e) Plan execution. ____ (e) Plan execution. . The balanced scorecard system was created to provide a broader perspective on the measures of corporate success, as well as establish the logical linkages that occur among each of those perspectives. Match the four (4) assessment perspectives that the balanced scorecard assures with its brief description of what that perspective means. ____ (a) External Perspective ____ (a) External Perspective ____ (b) Financial Perspective ____ (b) Financial Perspective ____ (c) Internal Perspective ____ (c) Internal Perspective ____ (d) Learning and Growth Perspective ____ (d) Learning and Growth Perspective 1) ) How do we compare against our primary competitors? 1) ) How do we compare against our primary competitors? 2) How do we look to our customers? 2) How do we look to our customers? 3) What is our level of access to investment capital? 3) What is our level of access to investment capital? 4) How do we look to our shareholders? 4) How do we look to our shareholders? 5) 5) Where and how must we improve our operational processes? Where and how must we improve our operational processes? 6) 6) How can we continue to innovate? How can we continue to innovate?

Segregation of duties is an effective preventative control procedure that separates three important functions, such that not one person has the ability and/or authority regarding any two. Which of the following is NOT one of those targeted abilities? _____ a ) ) Authorization Authorization — — Approving Approving transactions and decisions transactions and decisions _____ b) Recording — Recording — Preparing Preparing source documents; maintaining journals, ledgers, source documents; maintaining journals, ledgers, or other files; preparing reconciliations; and preparing performance reports or other files; preparing reconciliations; and preparing performance reports _____ c) Receiving _____ c) Receiving — — Distribution Distribution receipt of incoming stock assets receipt of incoming stock assets _____ d) Custody — Custody — Handling Handling cash/assets, maintaining an inventory storeroom, cash/assets, maintaining an inventory storeroom, receiving incoming customer checks, writing checks on the organization’s bank account receiving incoming customer checks, writing checks on the organization’s bank account In taking action to reduce the amount of inherent risk, organizations can apply IT General Controls (ITGCs). Those controls provide three important overall functions. Which of the following is not one of those three? _____ a ) ) Detection Detection _____ b) Correction Correction _____ c) Reduction Reduction _____ d) Prevention Prevention

We discussed three (3) general philosophies regarding systems implementation. Of the following statements concerning those implementation options, which of the following is NOT true? _____ a) “Modular” implementation approach is always less risky and can _____ a) “Modular” implementation approach is always less risky and can typically be done on a shorter timeline than the “Parallel” approach. typically be done on a shorter timeline than the “Parallel” approach. _____ b) The “Big Bang” approach represents the most aggressive, and thus _____ b) The “Big Bang” approach represents the most aggressive, and thus potentially the riskiest, of the three. potentially the riskiest, of the three. _____ c) The “Parallel” approach can be useful in helping associates better _____ c) The “Parallel” approach can be useful in helping associates better adapt to the new system. adapt to the new system. _____ d) All of these approaches require a complete business continuity plan _____ d) All of these approaches require a complete business continuity plan going in to reduce the potential effects of resulting risk. going in to reduce the potential effects of resulting risk. _____ e) The “Modular” approach can be useful in helping associates better _____ e) The “Modular” approach can be useful in helping associates better adapt to the new system. adapt to the new system.

Within the context of Systems, we spoke of “IT Governance” as being the act of managing and assurance within a governing framework (i.e., government). More specifically, we said governance relates to decisions that define setting expectations, granting power, or verifying performance. Accordingly, we said that there are four (4) major objectives of IT governance. Given what was just said, which of the following is NOT one of those objectives? _____ a) Providing a strategic framework for projects _____ a) Providing a strategic framework for projects _____ b) Setting priorities on projects that deliver the greatest value _____ b) Setting priorities on projects that deliver the greatest value _____ c) Assuring project decision making is performed by the functions with the _____ c) Assuring project decision making is performed by the functions with the most at stake most at stake _____ d) Assuring that selected projects have the resources needed to be _____ d) Assuring that selected projects have the resources needed to be successful successful _____ e) Aligning sponsorship for selected projects _____ e) Aligning sponsorship for selected projects

We said that an Enterprise Architecture is the “Great Connector” between an organization’s strategy and its capabilities, functions, elements and processes. We then said all of this is accomplished through specific goals and measures. We described several of those goals. Which of the following statements does NOT align with those goals/measures? The intended “desired benefits” of applying an Enterprise Architecture include: _____ _____ a) The elimination (or minimization) of a) The elimination (or minimization) of d d ata ata redundancy within the operational systems environment. redundancy within the operational systems environment. __ __ X X __ b) Reducing unneeded flexibility in business growth or re-structuring. __ b) Reducing unneeded flexibility in business growth or re-structuring. _____ c) The elimination (or minimization) of _____ c) The elimination (or minimization) of process process redundancy within the operational systems environment. redundancy within the operational systems environment. _____ d) The reduction of data complexity by extracting data from the operational environment and re-centering it into a _____ d) The reduction of data complexity by extracting data from the operational environment and re-centering it into a more manageable data warehouse environment. more manageable data warehouse environment.

With further regard to the topic of Enterprise Architecture, please whether each of the following statements is True or False . __ __ T T __ __ a) a) Enterprise Architectures are a means to help make clear up front how the Enterprise Architectures are a means to help make clear up front how the desired states of compliance are to be both facilitated and assured. desired states of compliance are to be both facilitated and assured. __ __ T T __ __ b) b) Enterprise Architectures are needed Enterprise Architectures are needed to help assure some measure of rigor and to help assure some measure of rigor and consistency in how processes are created, managed, evolved and value focused. consistency in how processes are created, managed, evolved and value focused. __ __ F F __ __ c) c) Enterprise Architecture are typically there by corporate mandate in much the Enterprise Architecture are typically there by corporate mandate in much the same way that there is for Internal Audit. same way that there is for Internal Audit. __ __ T T __ __ d) d) Enterprise Architectures come together in a layered form. Enterprise Architectures come together in a layered form. __ __ T T __ __ e) e) Enterprise Architectures are designed to help link together the non-technical Enterprise Architectures are designed to help link together the non-technical business elements with the logical models of the data/information that supports them. business elements with the logical models of the data/information that supports them.

An effective project prioritization process depends in part upon nailing down a consensus regarding a consistent scoring process for proposed efforts. We discussed several items that are critical steps in designing (and achieving consensus) on that scoring process . In that regard, please indicate whether each of the following statements are either true (T) of false (F): __ __ T T __ __ a) a) Focus On Establishing The Decision-Making Team. Build A Committee Of Focus On Establishing The Decision-Making Team. Build A Committee Of Cross-Functional Notables And Stakeholder “Allies” To Build Credibility. Cross-Functional Notables And Stakeholder “Allies” To Build Credibility. __ __ F F __ b) In Deciding Upon Actual Scoring Criteria To Be Used, Align Any Overall __ b) In Deciding Upon Actual Scoring Criteria To Be Used, Align Any Overall Weightings To Be Assigned With The Desires Of The Functions Making The Weightings To Be Assigned With The Desires Of The Functions Making The Proposals. Proposals. __ __ T T __ c) Develop A Supporting Process For Gathering The Scoring Information Needed __ c) Develop A Supporting Process For Gathering The Scoring Information Needed __ __ T T __ d) Roll Out A Scoring Methodology Involving A Cross-Functional Committee. __ d) Roll Out A Scoring Methodology Involving A Cross-Functional Committee.

The Systems Implementation process is comprised of four (4) sub-processes. Which of the following is NOT one of them. __ __ X X _ (a) Balancing of overall resources and needs. _ (a) Balancing of overall resources and needs. ____ (b) Follow-up and post-implementation evaluation. ____ (b) Follow-up and post-implementation evaluation. ____ (c) Governance priorities with regard to sponsorship and resource compliance. ____ (c) Governance priorities with regard to sponsorship and resource compliance. ____ (d) Establishing plans and associated controls. ____ (d) Establishing plans and associated controls. ____ (e) Plan execution. ____ (e) Plan execution. . The balanced scorecard system was created to provide a broader perspective on the measures of corporate success, as well as establish the logical linkages that occur among each of those perspectives. Match the four (4) assessment perspectives that the balanced scorecard assures with its brief description of what that perspective means. _ 2 2 __ (a) External Perspective __ (a) External Perspective _ 4 4 __ (b) Financial Perspective __ (b) Financial Perspective _ 5 __ (c) Internal Perspective __ (c) Internal Perspective _ 6 6 __ (d) Learning and Growth Perspective __ (d) Learning and Growth Perspective 1) How do we compare against our primary competitors? 1) How do we compare against our primary competitors? 2) How do we look to our customers? 2) How do we look to our customers? 3) What is our level of access to investment capital? 3) What is our level of access to investment capital? 4) How do we look to our shareholders? 4) How do we look to our shareholders? 5) 5) Where and how must we improve our operational processes? Where and how must we improve our operational processes? 6) 6) How can we continue to innovate? How can we continue to innovate?

We spent some time examining the Trust Services Framework, an accepted industry set of core principles designed to help address risks related to the assurance of IT- enabled systems reliability. Which of the following statements is NOT NOT true regarding that framework? _____ _____ a) a) Security is the foundational component of the framework, restricting Security is the foundational component of the framework, restricting system access to only authorized and authenticated users. system access to only authorized and authenticated users. _____ _____ b) b) Privacy protections and controls are largely the same as those used to Privacy protections and controls are largely the same as those used to assure Confidentiality protections. assure Confidentiality protections. _____ c) Availability refers to the assurance that the system is accessible “whenever _____ c) Availability refers to the assurance that the system is accessible “whenever needed” needed” __ __ X X __ __ d) d) Confidentiality relates to the protection of business-related information defined Confidentiality relates to the protection of business-related information defined primarily by government regulation primarily by government regulation _____ e) Processing Integrity refers to a system’s ability to produce accurate and timely _____ e) Processing Integrity refers to a system’s ability to produce accurate and timely information resulting from authorized transactions information resulting from authorized transactions

We discussed three (3) general philosophies regarding systems implementation. Of the following statements concerning those implementation options, which of the following is NOT true? __ __ X X __ a) “Modular” implementation approach is always less risky and can __ a) “Modular” implementation approach is always less risky and can typically be done on a shorter timeline than the “Parallel” approach. typically be done on a shorter timeline than the “Parallel” approach. _____ b) The “Big Bang” approach represents the most aggressive, and thus _____ b) The “Big Bang” approach represents the most aggressive, and thus potentially the riskiest, of the three. potentially the riskiest, of the three. _____ c) The “Parallel” approach can be useful in helping associates better _____ c) The “Parallel” approach can be useful in helping associates better adapt to the new system. adapt to the new system. _____ d) All of these approaches require a complete business continuity plan _____ d) All of these approaches require a complete business continuity plan going in to reduce the potential effects of resulting risk. going in to reduce the potential effects of resulting risk. _____ e) The “Modular” approach can be useful in helping associates better _____ e) The “Modular” approach can be useful in helping associates better adapt to the new system. adapt to the new system.