eGRACS Accreditation - Practice Test

Q1: In the eGRACS hierarchy, how many unified ICT controls form the complete set?

120
24
40
81

Consider the total number of controls that are divided into forty interdependent triads.

A✔️The architecture is built upon 120 hand-selected ICT controls that are unified from global standards.
B❌This number refers to the approximate count of global standards and regulations fused into the framework.
C❌While significant, forty represents the number of 'Golden Triangles' rather than the total number of individual controls.
D❌Eighty-one is the specific number of controls found within the Tactical Tier alone.

Q2: The eGRACS Method uses a 'feedback loop' primarily to:

Delay the audit process until goals are met
Lock the organization into a fixed set of rules
Transform governance into a dynamic, evolving system
Ensure that employees are punished for non-compliance

Reflect on how an organisation avoids becoming obsolete when its environment or maturity level changes.

C✔️The feedback loop ensures that controls are 'right-sized' and remain aligned with the business as it matures.
A❌Continuous refinement actually helps streamline audits and identify successful practices more quickly.
B❌eGRACS aims to move away from static rules toward a system that bends and moulds to the organisation's needs.
D❌The loop is designed for system improvement and adaptive evolution, not for punitive measures.

Q3: Which three foundational controls constitute the Core Tier of the eGRACS Framework?

Strategy, Architecture, and Assurance
Manage Demand, Deliver Solution, and Manage Capability
Identify, Protect, and Recover
Plan, Build, and Run

Look for the three pillars that set the 'vision' at the top of the pyramid.

B✔️These three pillars represent the highest level of the hierarchy and set the foundational direction for the business.
A❌These specific controls are part of the Strategic Tier that expands upon the Core pillars.
C❌While important in cybersecurity, these are functional areas often found in domain-based models like NIST CSF rather than the eGRACS Core.
D❌These are common lifecycle phases but do not match the specific terminology of the eGRACS foundational pillars.

Q4: Scenario: Your client’s enterprise IT is struggling with fragmented governance across multiple frameworks. Using the eGRACS Framework, outline a step-by-step approach to unify governance. Include domains, tiers, and examples of operational activities.

Q5: Scenario: A new regulation impacts multiple domains. Explain how you would map controls to maintain compliance end-to-end.

eGRACS Accreditation - Practice Test

Looking for more?

🤝Calling Consultants

🤽Video Explainers

🎧Vodcasts