Company A is a large retail grocery chain of about 250 stores. It operates stores with a very low profit margin by maintaining stringent cost controls with a very lean management philosophy. and minimal corporate infrastructure. The Company has no recognizable IT strategy, IT steering, IT architectural review or ERM committees. Which finding would most likely motivate the Company’s adoption of a distinct IT governance program.

What would be the most appropriate measure for the Board to use to track the value of the Companys IT Governance program?

Store operations depend on IT-staff maintained software that was developed in-house twenty years ago. What is the most compelling argument regarding modernization?

The Company has acquired the assets of a 100 store chain liquidated thru bankruptcy. The acquired chain’s computer systems are vendor proprietary, leading edge systems. What should the Company do with these systems?

Despite the CFO’s certification of compliance with the bankcard industry’s security standards (PCI DSS), the Company experienced a significant security breach that exposed card information of more than 1M customers. What changes should be made in the Companys security program.