eGRACS Accreditation - Practice Test

Q1: How does the eGRACS Schema achieve a 'Single Source of Truth'?

By deleting all historical records to avoid confusion
By allowing only the CEO to make decisions regarding ICT
By requiring all data to be stored in a single physical hard drive
By ensuring risk registers, audit tasks, and compliance obligations flow from the same core system

Think about the benefits of having all governance data 'speak the same language'.

A✔️Preserving and using data to inform controls is central to the feedback loop, not deleting it.
B❌The system is designed for multi-layered governance and collaboration, not to centralise all decisions in one person.
C❌A 'Single Source of Truth' in governance refers to logical and structural alignment, not physical hardware constraints.
D❌Unifying these elements prevents them from living in fragmented, contradicting spreadsheets or silos.

Q2: What is the 'ripple effect' mentioned in the context of the Golden Triangles?

The negative impact of redundant compliance efforts across silos.
The slow propagation of policy changes in large enterprises.
The failure of the entire system when a single control is breached.
The way interdependent controls adapt when one unit is updated.

Reflect on how three points on a vertex might react to movement at one point.

D✔️The triadic design ensures that changes to one control cause the others in the micro-ecosystem to adjust, maintaining system stability.
A❌While redundant efforts are a problem in traditional models, the ripple effect specifically describes the adaptive resilience of the eGRACS triads.
B❌The ripple effect in Golden Triangles is intended to ensure stability and resilience, not to describe bureaucratic delays.
C❌The Golden Triangles are designed to prevent system breakage by allowing for self-balancing adaptation.

Q3: In the eGRACS Model, what do 'eGRACS SOPs' provide to an organisation?

Step-by-step instructions for implementing practices and using templates
Financial loans to pay for compliance audits
The legal text of the GDPR regulation
A list of potential security threats from hackers

Look for the component that 'turns practice into action' by removing ambiguity.

A✔️SOPs eliminate guesswork by providing precise directions for daily execution of controls.
B❌Standard Operating Procedures (SOPs) are operational documents, not financial instruments.
C❌SOPs translate regulations into procedures; they are not merely the original legal text.
D❌While they help security, SOPs are procedural instructions rather than a threat intelligence feed.

Q4: Scenario: Design a training plan for onboarding new ICT managers in the organization using the eGRACS Framework. Include objectives, modules, and evaluation methods.

Q5: Scenario: A new regulation impacts multiple domains. Explain how you would map controls to maintain compliance end-to-end.

eGRACS Accreditation - Practice Test

Looking for more?

🤝Calling Consultants

🤽Video Explainers

🎧Vodcasts