CGEIT Risk Optimization Practice Question
During an IT governance board meeting, the CGEIT practitioner notices that the current risk profile deviates significantly from the approved risk appetite. What is the most appropriate next step?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Formally report the variance to the board and propose a remediation plan.
Governance requires transparency and corrective action when thresholds are exceeded.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Update the enterprise risk management policy to include the new risks.
Why it's wrong here
Updating policy does not address the active variance from the approved threshold.
- ✗
Instruct the IT department to stop all new projects until the risk is lowered.
Why it's wrong here
This is a reactionary measure that lacks a formal governance process.
- ✓
Formally report the variance to the board and propose a remediation plan.
Why this is correct
Transparency and proposing corrective governance actions are core responsibilities.
- ✗
Adjust the risk appetite levels to match the current risk profile.
Why it's wrong here
Changing appetite to fit the status quo is poor governance; the risk must be mitigated or accepted formally.
About these practice questions
This CGEIT question is part of Courseiva's 214-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official ISACA exam blueprint
This CGEIT practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CGEIT exam.