eGRACS Accreditation - Practice Test

Q1: Why is the eGRACS Framework's hierarchy described as 'fractal'?

Because it is composed of glass-like structures that can easily break under regulatory pressure.
Because it requires mathematical formulas to calculate the risk of every control.
Because it scales fluidly, expanding like a tree to fit the organisation's complexity as it matures.
Because every control in the Tactical Tier is a miniature version of the entire Schema.

Think about how a simple pattern can grow into a complex, large-scale structure.

C✔️The tiered structure allows the framework to grow with the business rather than becoming obsolete.
A❌Fractal refers to the scaling property of the hierarchy, not the physical properties of glass.
B❌While the design is geometric, 'fractal' primarily describes its organic scalability and growth.
D❌While 'fractal' implies self-similarity, the eGRACS tiers have distinct functions (Core, Strategic, etc.).

Q2: How does eGRACS handle the challenge of 'fragmented spreadsheets' in traditional compliance?

By ensuring risk, security, and audit tasks flow from the same core system and inform each other automatically.
By providing a master spreadsheet template that is 120 columns wide.
By converting all spreadsheets into static PDF reports for the board.
By requiring all departments to use the same shared network folder for their Excel files.

Look for the term used to describe a system where all data comes from one integrated place.

A✔️The unified architecture creates a single source of truth that replaces disconnected spreadsheets.
B❌The system is described as moving beyond spreadsheets into a dynamic, integrated system.
C❌PDFs are even more static than spreadsheets; eGRACS aims for a dynamic, responsive system.
D❌Simply sharing a folder does not integrate the data flow or create a dynamic architecture.

Q3: What happens when an industry-specific regulation (like HIPAA) requires an update to a control in the eGRACS system?

The entire system must be deleted and re-installed
The interdependent controls in the relevant Golden Triangle adapt to the new context
The regulation is ignored to maintain internal stability
The specific triangle is deactivated to prevent errors

Recall how the structural relationship between controls in a triad handles change.

B✔️This 'ripple effect' ensures that the overall governance architecture remains stable and resilient even as external rules change.
A❌The framework is designed for 'adaptive resilience' to avoid breakage during such updates.
C❌The purpose of the eGRACS Model is to ensure the organisation remains compliant with such regulations.
D❌Deactivating controls would create gaps in governance, which the interdependent design aims to prevent.

Q4: Scenario: Design a training plan for onboarding new ICT managers in the organization using the eGRACS Framework. Include objectives, modules, and evaluation methods.

Q5: Scenario: A new regulation impacts multiple domains. Explain how you would map controls to maintain compliance end-to-end.

eGRACS Accreditation - Practice Test

Looking for more?

🤝Calling Consultants

🤽Video Explainers

🎧Vodcasts