eGRACS Accreditation - Practice Test

Q1: How many 'Golden Triangles' are distributed across the four-tiered hierarchy?

40
120
10 per tier
3

Divide the total number of controls by the number of points on a triangle.

A✔️With 120 controls arranged into triads, there are exactly forty interdependent Golden Triangles in the system.
B❌This is the total count of individual controls, which are then grouped into triads.
C❌The triangles are distributed hierarchically, but the number per tier depends on the number of controls (e.g., 81 controls in the Tactical tier form 27 triangles).
D❌Three is the number of controls per individual triangle, not the total number of triangles.

Q2: In the context of the eGRACS Method, what is meant by 'right-sized' control?

Reducing the total number of controls to zero to eliminate operational friction.
A rule that requires all control descriptions to be the same length in the risk register.
Governance that is perfectly aligned with the organisation's maturity level and actual business needs.
Ensuring the number of controls always matches the number of employees in the IT department.

Think about the difference between a custom-tailored suit and a one-size-fits-all uniform.

C✔️The method avoids forcing a 'one-size-fits-all' template, ensuring controls fit the 'company beat'.
A❌The goal is 'right-sized' control, which means appropriate governance, not the absence of it.
B❌'Right-sized' refers to the relevance and scale of the controls, not the physical size of the text descriptions.
D❌Scaling is based on complexity and maturity, not a 1:1 ratio with employee headcount.

Q3: How does the 'interdependency' of Golden Triangles enhance the resilience of the governance system?

It requires that all three controls in a triangle be managed by the same software application.
Updating one control causes the others in the triad to adapt to the new context rather than the system breaking.
It ensures that if one control fails, the other two automatically shut down for safety.
It prevents the organisation from ever having more than three controls in any department.

Consider what happens to a balanced structure when one part moves.

B✔️This 'ripple effect' maintains stability and structural integrity across the entire hierarchy.
A❌The interdependency is structural and contextual, not necessarily limited to a single software tool.
C❌The design is meant to adapt and reinforce, not to trigger a total shutdown of the ecosystem.
D❌The triadic structure applies to how the 120 controls are organised, not a limit on departmental resources.

Q4: Scenario: Design a training plan for onboarding new ICT managers in the organization using the eGRACS Framework. Include objectives, modules, and evaluation methods.

Q5: Scenario: A new regulation impacts multiple domains. Explain how you would map controls to maintain compliance end-to-end.

eGRACS Accreditation - Practice Test

Looking for more?

🤝Calling Consultants

🤽Video Explainers

🎧Vodcasts