CGEIT Governance OF Enterprise IT Practice Question
Which action should the governance body take if a major IT risk is identified that exceeds the enterprise's risk appetite?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Formally communicate the risk to the board and propose a risk treatment plan
When risk exceeds appetite, the board or governance committee must formally accept, mitigate, or transfer the risk.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Formally communicate the risk to the board and propose a risk treatment plan
Why this is correct
Transparency and formal treatment plans are required for risks exceeding appetite.
- ✗
Wait for the risk to manifest before taking action
Why it's wrong here
Governance requires proactive risk management, not reactive.
- ✗
Re-evaluate the definition of risk appetite to match the current state
Why it's wrong here
Risk appetite should be based on strategy, not retrofitted to match poor performance.
- ✗
Request the IT department to simply delete the system causing the risk
Why it's wrong here
This is an extreme action that must be considered through a risk-benefit analysis.
- ✗
Ignore the risk if it helps achieve a short-term profit target
Why it's wrong here
Ignoring risk is a failure of governance responsibility.
About these practice questions
Courseiva writes every CGEIT question from scratch — 214 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official ISACA exam blueprint
This CGEIT practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CGEIT exam.