DPI Guiding Principles And GRC Practice Question
A company's internal audit department issues 200 findings per year, but IT can only remediate 20 due to resource constraints. The audit findings pile up year over year, creating massive regulatory exposure. How should IT and audit apply 'Focus on value' and 'Keep it simple and practical' to resolve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Jointly prioritize findings based on actual business risk and critical value stream impact, tackling remediation in manageable batches.
Trying to fix 200 findings fails. Collaborating to prioritize the top risks that threaten critical business value resolves the backlog.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Ignore all future audit reports and operate without internal controls.
Why it's wrong here
Ignoring audits violates compliance governance.
- ✓
Jointly prioritize findings based on actual business risk and critical value stream impact, tackling remediation in manageable batches.
Why this is correct
Focusing on high-value, high-risk items makes remediation practical and impactful.
- ✗
Hire 50 temporary auditors to write more findings.
Why it's wrong here
More findings exacerbate the remediation bottleneck.
- ✗
Outsource audit remediation to an unvetted offshore contractor.
Why it's wrong here
Outsourcing without risk prioritization does not solve the underlying capacity mismatch.
Visual reference
About these practice questions
This DPI question is part of Courseiva's 316-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official AXELOS / PeopleCert exam blueprint
This DPI practice question is part of Courseiva's free AXELOS / PeopleCert certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DPI exam.