Exam CGEIT topic 1 question 445 discussion

Ensures that IT risks are directly linked to the enterprise's business goals. IT Capability focus more on how well IT performs rather than on how IT risks impact the achievement of business objectives.

C. Residual IT risk

The answer is A. IT capability and performance measures. IT capability and performance measures are the most important aspect to address in a risk self-assessment to identify improvement opportunities for current IT services. By evaluating IT capability and performance measures, the enterprise can assess the current state of its IT services, identify any gaps or weaknesses, and determine opportunities for improvement. This assessment can include factors such as service availability, reliability, responsiveness, security controls, compliance with policies and regulations, customer satisfaction, and other relevant performance indicators. The other options are also important, but they are not as important as IT capability and performance measures. Mapping of business objectives to IT risk is important for aligning IT risk management with the business objectives. However, it does not directly address the improvement opportunities for current IT services.