eGRACS Accreditation - Practice Test

Q1: In the context of eGRACS, what is meant by the phrase 'Control Isn't a Cage'?

Structured governance empowers a business to innovate safely
Controls should be ignored whenever they limit speed
Controls are only temporary measures for emergencies
There are no actual restrictions in the framework

Think about the relationship between a solid foundation and the ability to build higher.

A✔️Effective control provides the resilience and clarity needed to pursue new opportunities without excessive risk.
B❌eGRACS promotes 'right-sized' control that supports business goals rather than circumventing safety.
C❌eGRACS treats governance as a permanent, integrated backbone of business operations.
D❌The framework does contain 120 specific controls, but they are designed to be agile and supportive rather than restrictive.

Q2: In a large enterprise, what does it mean to use the eGRACS Framework as a 'diagnostic, design, and implementation scaffold'?

It allows for a hybrid approach where strategic vision and tactical execution are addressed simultaneously.
It refers to a method of building physical IT infrastructure before software is chosen.
It involves conducting audits only after the entire organisation has reached the highest maturity level.
It means the framework is used only as a temporary structure until the 'real' standards like ISO 27001 are ready.

Think about how a structure can support work at different levels of a building at the same time.

A✔️The scaffold structure supports moving top-down for vision and bottom-up for operational fixes at the same time.
B❌The 'scaffold' is a metaphor for the governance structure, not physical construction.
C❌The scaffold helps organisations at any maturity level benchmark their progress and implement improvements immediately.
D❌The framework is a permanent unifying architecture, not a temporary placeholder.

Q3: What does the 'Method' component of the eGRACS Schema represent?

The operational playbook for customising and applying the framework.
The set of pre-designed audit report templates.
The database containing the 120 ICT controls.
The legal department responsible for tracking law changes.

It is described as the bridge between theory and organizational reality.

A✔️The Method is the 'secret sauce' that bends and moulds the framework to fit an organisation's specific DNA.
B❌Templates and audit reports are part of the eGRACS Model.
C❌The collection of controls itself is the Framework, while the Method is the process of implementation.
D❌Tracking laws is handled by Continuous Normalisation and Global Evolution Mapping, not the Method's playbook.

Q4: Scenario: Design a training plan for onboarding new ICT managers in the organization using the eGRACS Framework. Include objectives, modules, and evaluation methods.

Q5: Scenario: A new regulation impacts multiple domains. Explain how you would map controls to maintain compliance end-to-end.

eGRACS Accreditation - Practice Test

Looking for more?

🤽Video Explainers

🎧Vodcasts