eGRACS Accreditation - Practice Test

Q1: Which component of the eGRACS Model provides step-by-step instructions for daily execution?

eGRACS Practices.
eGRACS SOPs (Standard Operating Procedures).
eGRACS Templates.
eGRACS Core Controls.

Look for the element that turns 'what to do' into 'how to do it' exactly.

B✔️SOPs are designed to eliminate guesswork by providing precise instructions for implementing practices and using templates.
A❌Practices represent the real-world application of controls adapted to specific regulations, but are not the instructional steps themselves.
C❌Templates are pre-designed documents and forms, not the procedural instructions for using them.
D❌Core controls are high-level strategic pillars belonging to the Framework, not operational instructions in the Model.

Q2: What is the specific purpose of 'eGRACS Practices' within the Model?

Recording minutes of board meetings
Writing the original code for new software applications
Providing real-world applications of controls tailored to specific industry regulations
Training staff in basic computer literacy

Consider them as the 'how-to' guide for aligning with mandates like HIPAA or ISO 27001.

C✔️Practices act as a 'how-to' guide for meeting demands like HIPAA or Solvency II without duplication.
A❌While documentation is key, 'Practices' refer to the application of the 120 unified controls.
B❌eGRACS governs the software lifecycle but does not involve the direct writing of application code.
D❌The practices are specific governance applications for controls, not general IT training.

Q3: Which tier of control includes 'Strategy,' 'Architecture,' and 'Assurance'?

Tactical Tier
Core Tier
Strategic Tier
Operational Tier

Look for the second level of the four-tiered hierarchy.

C✔️These focus areas expand upon the Core foundational pillars (Tier 1) at a higher management level (Tier 2).
A❌The Tactical Tier contains the most granular hands-on controls, such as 'Strategic Plan' or 'Mitigation Controls'.
B❌The Core Tier consists of the broader categories of Manage Demand, Deliver Solution, and Manage Capability.
D❌The Operational Tier contains more specific actions like 'Design,' 'Build,' and 'Implementation'.

Q4: Scenario: Your client’s enterprise IT is struggling with fragmented governance across multiple frameworks. Using the eGRACS Framework, outline a step-by-step approach to unify governance. Include domains, tiers, and examples of operational activities.

Q5: Scenario: Design a training plan for onboarding new ICT managers in the organization using the eGRACS Framework. Include objectives, modules, and evaluation methods.

eGRACS Accreditation - Practice Test

Looking for more?

🤝Calling Consultants

🤽Video Explainers

🎧Vodcasts