eGRACS Accreditation - Practice Test

Q1: How does 'Control Architecture' in eGRACS differ from a traditional 'Control Inventory'?

It functions as a dynamic, self-balancing system rather than a static list.
It focuses solely on regulatory compliance instead of operational risk.
It replaces automated controls with manual checklist procedures.
It is a rigid grouping of controls that cannot be customised.

Think about the difference between a collection of parts and a designed ecosystem.

A✔️Architecture implies structural interdependency where controls reinforce each other, whereas an inventory is typically just a flat list of items.
B❌eGRACS integrates risk, compliance, and security into a unified system rather than narrowing the focus.
C❌eGRACS aims to move away from manual 'fire drills' and towards a more integrated, automated flow of information.
D❌The eGRACS Method specifically allows for the bending and moulding of the architecture to fit organisational needs.

Q2: What metaphor does the source use to describe the eGRACS Framework's growth?

A tree expanding its branches.
A skyscraper without a foundation.
A cage that locks down data.
A sinking ship being patched.

Look for a biological or nature-based comparison of expansion.

A✔️The fractal nature of the framework allows it to scale fluidly and adjust as the organisation matures, much like a growing tree.
B❌eGRACS is described as the foundation for a skyscraper, not a structure lacking one.
C❌eGRACS explicitly states that 'Control Isn't a Cage' and is meant to set the organisation free.
D❌This is the metaphor used to describe the old, fragmented way of managing controls before adopting eGRACS.

Q3: The 'Golden Triangle Playbook' is a tool specifically used to explore:

The list of the world's most successful ICT startups.
A directory of external legal consultants.
The 40 triadic groupings of the 120 unified controls.
The historical origins of the triangle in ancient art.

Focus on the 'triadic' aspect of the eGRACS design.

C✔️The Golden Triangles are the core architectural units of the framework, arranged in 40 interdependent sets of three.
A❌The Playbook is a specific governance tool for the eGRACS Framework, not a general business list.
B❌The Playbook focuses on the internal control structure and its self-balancing resilience.
D❌While inspired by design principles, the Playbook is a practical tool for modern ICT governance.

Q4: Scenario: Your client’s enterprise IT is struggling with fragmented governance across multiple frameworks. Using the eGRACS Framework, outline a step-by-step approach to unify governance. Include domains, tiers, and examples of operational activities.

Q5: Scenario: A new regulation impacts multiple domains. Explain how you would map controls to maintain compliance end-to-end.

eGRACS Accreditation - Practice Test

Looking for more?

🤝Calling Consultants

🤽Video Explainers

🎧Vodcasts