Project+ Compliance & IT Governance Quiz

1. What does PCI DSS primarily protect?

Employee personal information

Payment card data and financial transactions

Medical records

Customer contact information

2. Which stakeholder group is responsible for overseeing IT governance implementation?

Only IT technicians

Senior management, board of directors, and audit committees

Only external auditors

Marketing departments

3. How do governance frameworks support IT project success?

By eliminating the need for project planning

By providing structure, oversight, and alignment with organizational goals

By increasing project timelines

By replacing project managers

4. What is the primary focus of SOX compliance?

Data privacy protection

Network security

Financial reporting accuracy and accountability

Software development standards

5. Which of the following best describes a control in IT governance?

A way to eliminate all project risks

A mechanism to manage risks and ensure compliance

An obstacle to project progress

A cost center with no value

6. What role does documentation play in IT governance and compliance?

It is unnecessary bureaucracy

It provides evidence of compliance and aids audits

It only applies to government projects

It slows down project execution

7. Which regulation applies specifically to healthcare organizations handling patient data?

GDPR

SOX

HIPAA

PCI DSS

8. What is a key benefit of implementing strong governance in IT projects?

Guaranteed project success

Reduced compliance risks and improved decision-making

Elimination of all stakeholder conflicts

Lower staffing requirements

9. Which framework helps organizations identify and manage enterprise-wide risks?

ITIL

ISO 31000

TOGAF

Six Sigma

10. In IT governance, what is the purpose of establishing clear accountability?

To blame individuals when issues occur

To ensure responsible decision-making and control

To reduce project scope

To increase project costs

11. Which framework provides a structured approach to IT governance and aligns IT with business objectives?

ITIL

COBIT

ISO 27001

NIST

12. Which of the following is a component of a comprehensive IT governance framework?

Policies, procedures, and controls

Only budget management

Vendor selection alone

Marketing campaigns

13. What is a primary responsibility of the project manager regarding compliance?

Ignore compliance to meet deadlines

Ensure the project meets all applicable legal and regulatory requirements

Leave compliance to legal teams only

Document violations for future reference

14. Which regulation requires organizations to report data breaches?

HIPAA

SOX

GDPR

PCI DSS

15. What is the relationship between governance and risk management in IT projects?

They are unrelated

Governance provides the framework within which risk management operates

Risk management replaces governance

Governance only applies to large projects

16. Which standard specifically addresses information security management systems?

ISO 9001

ISO 27001

ISO 31000

ISO 50001

17. In IT governance, what is the role of an audit?

To increase project expenses

To verify compliance and identify control gaps

To eliminate all project risks

To replace project management

18. What does GDPR primarily regulate?

Software development methodologies

Personal data protection and privacy

Network infrastructure

Project budget allocation

19. Which of the following is a key component of IT governance?

Risk management and oversight

Marketing strategy

Employee scheduling

Vendor negotiations

20. What is the primary purpose of compliance in IT projects?

Reduce project costs

Ensure adherence to legal, regulatory, and organizational requirements

Accelerate project timelines

Increase team productivity

Project+ Compliance Considerations in IT Projects Quiz