ITIL4-DPI Practice Questions

Compliance is defined as the act of adhering to requirements. These requirements can be internal, such as organizational policies, or external, such as laws, regulations, and contractual obligations. When an organization follows the local laws of a country where it operates, it is directly engaging in the act of compliance. Therefore, the most direct and immediate result of this action is an improved state of compliance with those specific legal and regulatory requirements. This is a core component of the 'Compliance' aspect within the Governance, Risk, and Compliance (GRC) framework.

A. Improved governance: Governance is the overall framework for directing and controlling an organization. While compliance is a key outcome of good governance, following a specific law is an act of compliance itself, not a direct improvement of the entire governance system.

B. Increased risk: Following laws is a risk mitigation activity. It is intended to reduce or avoid legal, financial, and reputational risks associated with non-compliance, not increase them.

D. Increased value: While improved compliance can lead to increased value by avoiding fines and enhancing reputation, this is a secondary or indirect outcome. The most direct result of following a law is achieving compliance.

1. AXELOS. (2020). ITIL® 4: Direct

Plan and Improve. TSO (The Stationery Office).

Section 3.2.3

'Compliance': "In the context of an organization

compliance means ensuring that the requirements of standards

policies

and regulations are met. Compliance management begins by identifying the requirements with which the organization must comply. These may be... external

such as laws

regulations

standards

and contractual obligations." This directly links following laws to the act and result of compliance.

Section 3.2

'Governance

risk

and compliance (GRC)': This section outlines how compliance is an integral part of the overall GRC approach

distinguishing it from the broader concept of governance and the function of risk management.

The most effective method to ensure alignment across a distributed organization is to establish a clear hierarchy of objectives. This process, known as cascading objectives, translates high-level strategic goals into more specific, detailed objectives for each subsequent level of the organization (e.g., divisions, departments, teams). This creates a direct line of sight from the daily activities of every IT division back to the overarching organizational objectives, ensuring that all efforts are coordinated and contribute to the same strategic vision. This is a fundamental principle of governance and strategic planning.

A. Enforcing common practices ensures operational consistency, but it does not guarantee that those practices are aligned with strategic business objectives.

B. Aligning risk mitigation is a component of governance but is too narrow; it does not address the alignment of all IT activities as the question requires.

D. Collecting feedback is an important communication activity, but it is an input to the planning process and does not, by itself, create or enforce alignment.

1. ITIL® 4: Direct

Plan and Improve. AXELOS

2020.

Section 2.1.3

"Cascading objectives": This section explicitly describes the process. It states

"Objectives can be cascaded down through an organization

from the governing body to all levels of staff... This cascade ensures that there is a tangible link between an individual’s daily work and the vision of the organization." This directly supports option C as the correct mechanism for ensuring alignment.

Section 3.1.2

"Governance activities": This section outlines the 'Direct' activity of a governing body

which includes "setting the direction and prioritization for the organization

its portfolios

programmes

products

and services." Cascading objectives is the primary method for implementing this direction throughout the organization.

The initiative's primary objectives are to expand the customer base and increase customer retention, which are core responsibilities of the sales department. The Director of Sales is the senior business leader most accountable for these outcomes. In a high-cost, high-priority initiative facing criticism over resources, the support of a powerful sponsor is paramount. The Director of Sales is best positioned to champion the business case, articulate the strategic value to other senior leaders, justify the expenditure, and secure the necessary budget and resources. Their sponsorship is critical to overcoming organizational resistance and ensuring the project's success.

B. Service Level Manager: This role focuses on negotiating and monitoring service levels, not on securing strategic project funding or championing the overall business case for a new system.

C. Information Security Manager: This manager's role is vital for ensuring the system is secure, but they are not the primary stakeholder responsible for obtaining the project's overall budget and resources.

D. Call Centre Manager: As a manager of a user group (and an outsourced one), their support is important for adoption, but they lack the organizational authority to secure funding for a high-cost corporate initiative.

1. ITIL® 4: Direct

Plan and Improve. AXELOS. (2020). Section 5.1.3

"Stakeholder management

" emphasizes the importance of engaging senior leaders who "may control the budget and/or resources for the improvement." The Director of Sales fits this description as the primary business sponsor.

2. ITIL® 4: Direct

Plan and Improve. AXELOS. (2020). Section 4.3.1

"Define the business case

" states that a business case is used to justify expenditure and secure funding. The stakeholder whose business area benefits most (Sales) is the natural champion to own and defend this business case.

3. ITIL® 4: Direct

Plan and Improve. AXELOS. (2020). Section 3.1

"Direction

" discusses how direction is established through strategies and policies. The Director of Sales sets the direction for customer acquisition and retention

making their support essential to align this high-cost IT initiative with business strategy.

A strategic plan defines an organization's long-term vision, mission, and high-level goals. A multi-year infrastructure expansion is a significant, long-term initiative that directly supports the organization's future direction and vision. Strategic plans provide the overarching framework and justification for such large-scale undertakings, setting the direction for subsequent tactical and operational planning. They focus on what the organization wants to achieve over several years, making it the appropriate document to outline a long-term expansion vision.

A. Tactical plans are medium-term and detail how to implement specific parts of the strategy, not define the overall long-term vision.

B. A project plan is for a single, time-bound initiative; a multi-year expansion would consist of many projects, each with its own plan.

C. Operational plans are short-term (daily, weekly) and focus on the routine activities required to deliver and support existing services.

1. AXELOS. (2020). ITIL® 4: Direct

Plan and Improve (DPI). TSO (The Stationery Office).

Section 2.3.1

"Strategy

direction

and planning

" explains that strategy sets the organization's direction and includes high-level plans to achieve its mission and vision.

Section 4.1.1

"Planning at different levels

" describes the cascade from long-term strategic plans to medium-term tactical plans and short-term operational plans

confirming that a multi-year vision belongs to the strategic level.

Figure 2.2

"Cascading objectives

" visually represents how the vision and mission at the strategic level are broken down into tactical portfolios and then operational tasks.

In the ITIL framework, governance and management are distinct activities. The governing body is responsible for setting the organization's direction and intent through the creation of policies. These policies define the rules and requirements. Management is then responsible for planning, implementing, and operating the necessary controls to ensure that these policies are followed and that organizational objectives are met. Therefore, policies are an output of governance, while the definition and implementation of controls are a management activity.

A. This statement incorrectly reverses the relationship. Controls are mechanisms implemented to ensure adherence to policies, not the other way around.

B. This is incorrect. A control is a specific means of managing risk or ensuring a process is followed, whereas a policy is a broader statement of intent.

C. This is an inaccurate generalization. Policies can apply to technology (e.g., an information security policy), and controls can apply to people (e.g., segregation of duties).

1. AXELOS. (2020). ITIL® 4: Direct

Plan and Improve. TSO (The Stationery Office).

Section 4.3.1

Policies: "A policy is the formally documented expectations and intentions of the governing body... Policies are used to direct the actions and behaviours of the organization

its employees

and its partners." (p. 78)

Section 4.3.2

Controls: "Controls are the means for managing a risk

ensuring that a business objective is achieved

or that a process is followed... Controls are implemented by the organization’s management and staff to provide reasonable assurance that the organization will achieve its objectives." (p. 79)

Section 2.1.1

Governance: "The governing body is accountable for the organization’s performance and its compliance with policies and external regulations... It accomplishes this through an activity referred to as the evaluation of the organization’s performance

and by directing the organization through strategy and policies." (p. 12)

When a manager centralizes decision-making and personally handles all challenging problems, they become a bottleneck. This slows down the resolution process as the team must wait for the manager's availability, leading to delays.

Furthermore, this behavior signals a lack of trust in the team's capabilities. For highly skilled professionals, being denied opportunities to tackle complex tasks and develop their expertise is demotivating. It undermines their autonomy and sense of value, causing morale to suffer and potentially leading to disengagement and higher staff turnover.

Employee morale improves: This is incorrect. Skilled professionals thrive on autonomy and challenging work; a manager taking these opportunities away is demotivating.

Decisions are made quickly: This is incorrect. Centralizing all complex issues with a single individual creates a bottleneck, which invariably slows down the decision-making process.

1. AXELOS

ITIL® 4: Direct

Plan and Improve. TSO (The Stationery Office)

2020.

Section 4.3.2

'Decision-making authority': This section explains that without effective delegation of authority

"decision-making can be slow and ineffective

as a small number of people become a bottleneck." This directly supports the consequence that 'Decisions take longer'.

Section 3.1.3

'Leading and managing': This section discusses various leadership styles. The behavior described is a form of micromanagement

which is contrary to the principles of servant leadership (enabling the team). Such a directive approach with skilled teams is known to "reduce morale and productivity" by limiting autonomy and trust. This supports the consequence that 'Employee morale suffers'.

The best approach is to first understand and leverage existing communication channels, which aligns with the ITIL guiding principle 'Start where you are'. By researching how teams currently communicate and using their preferred tools, IT managers can establish feedback channels that are familiar to users, thereby reducing resistance and increasing engagement. This method respects the existing culture and workflows, making the collection of feedback more natural and effective for a new, global line of business. It is a practical, low-disruption way to enable the necessary two-way communication.

B. Office hours are not a scalable or effective primary feedback method for a global organization due to time zone differences and limited accessibility.

C. Initiating a project for a new tool without first assessing the current state ignores the 'Start where you are' principle and can be costly and slow.

D. A printed newsletter is a one-way communication medium and does not fulfill the core requirement for two-way communication and obtaining feedback.

1. AXELOS. (2020). ITIL® 4: Direct

Plan and Improve (DPI). TSO (The Stationery Office).

Section 4.3.2.1 'Start where you are': "The current state should be investigated and observed directly to make sure it is fully understood... it is always better to consider what can be used from the current state." This supports option A's approach of researching existing communication methods before creating new ones and directly contradicts option C.

Section 4.1.2 'Communication': "Effective communication is timely

clear

and gets to the right audience through the right channels... The choice of communication channels and methods should be based on the audience and the message." This supports option A's focus on identifying the most appropriate

existing channels for the audience.

Section 4.1.3 'Organizational change management (OCM)': This section emphasizes that "It is important to establish feedback channels to allow people to ask questions

express concerns

and make suggestions." Option A provides the most effective method for establishing such channels in the given context.

The most effective approach is to establish a formal governance structure for decision-making. Option C proposes a risk-based model, which is a core principle of modern governance. By having the executive group retain authority for high-risk decisions, the organization ensures that critical choices receive appropriate oversight. Simultaneously, creating a clear policy for delegating lower-risk decisions directly addresses the bottleneck and delays. This structured delegation empowers other levels of the organization, improves responsiveness, and allows the executive group to focus on strategic matters, which is essential for a growing service provider.

A. This is a viable action but is less comprehensive than C. It lacks the formal, risk-based policy framework that would define when it is appropriate to escalate, which is crucial for consistency.

B. This option is too narrow. While technical staff should be involved in technical decisions, this approach fails to address the broader range of "all important decisions" mentioned in the scenario.

D. This describes supporting activities rather than the establishment of an authority structure. Training and automation are means to support a delegated model, not the model itself.

1. AXELOS. (2020). ITIL® 4: Direct

Plan and Improve (DPI). TSO (The Stationery Office).

Section 3.1.3

Governance activities: This section explains that a governing body is accountable for compliance with policies and may "delegate responsibility for the implementation and enforcement of these policies to the management and staff of the organization." This supports the concept of formal delegation.

Section 3.2.1

Controls for directing and planning: The text states

"Controls are also needed to ensure that the right people are making the right decisions... This includes defining policies for decision-making

delegating authority

and establishing a decision-making matrix or RACI chart." This directly supports creating a policy for delegating decisions.

Section 3.2.3

Risk management: This section emphasizes that the governing body should agree on the organization's risk appetite

which "will inform how decisions are made throughout the organization." This supports the risk-based approach in option C

where high-risk decisions are treated differently from others.

The activity of reviewing data to understand successes ("what is working well") and identify areas for change ("what needs to be done differently") is the essence of improvement. This process is a fundamental part of any feedback loop and is explicitly captured in the ITIL continual improvement model, particularly in the "Did we get there?" step. This step involves analyzing data and measurements to assess performance against the plan, thereby informing future actions and ensuring that organizational performance continually evolves to meet stakeholder expectations.

A. Direction: Direction involves setting the strategic course and providing guidance and constraints for action, rather than reviewing past performance data to identify lessons learned.

B. Planning: Planning is the forward-looking activity of creating a detailed approach to achieve an objective. The review of data is an input to planning, not the planning activity itself.

D. Vision: A vision is a high-level, aspirational description of an organization's future state. It guides direction but is not the operational activity of reviewing performance data.

AXELOS

ITIL® 4: Direct

Plan

and Improve (2020)

Section 4.3

"The role of the continual improvement model in all improvement initiatives." This section details the continual improvement model. Specifically

Section 4.3.6

"Did we get there?"

describes the process of evaluating the results of an initiative against the initial success criteria

which directly involves reviewing data to see what worked and what needs to change.

AXELOS

ITIL® 4: Direct

Plan

and Improve (2020)

Section 2.2.3

"Improvement." This section defines improvement as a "purposeful change of a state to a more desirable one." The text emphasizes that this requires understanding the current state and desired future state

a process that necessitates reviewing performance data.

AXELOS

ITIL® 4: Direct

Plan

and Improve (2020)

Section 2.2.1

"Direction." This section defines direction as providing "context

purpose

and constraints for plans and improvements

" distinguishing it from the act of reviewing performance.

The scenario describes the use of value stream mapping, a key Lean technique, to analyze a workflow. The identification of repeated activities as a form of waste and the subsequent plan to eliminate them to reduce delivery time is a direct application of workflow optimization. This practice focuses on improving the efficiency and effectiveness of the series of activities required to deliver value, which is precisely what is being done by removing redundant work. This aligns with the ITIL guiding principle of 'Optimize and automate'.

A. Cascading goals through the organization: This refers to aligning strategic objectives from senior leadership down to teams and individuals, which is not the specific activity described.

B. Building value chains on effective practices: This is a broader, more foundational activity. The scenario describes improving an existing workflow, not constructing a new value chain from scratch.

D. Establishing clear objectives for assessments: This is a preparatory step for an assessment. The scenario describes the outcome and action resulting from an assessment (the value stream map), not the act of setting its objectives.

1. AXELOS. (2020). ITIL® 4: Direct

Plan and Improve (DPI). TSO (The Stationery Office).

Section 4.3.3

Value stream mapping: "Value stream mapping is a method from the Lean toolkit that is used to visualize the stream

identify waste and non-value-adding activities

and design a future state value stream... The main types of waste are... waiting

rework/defects

extra processing..." The scenario's identification of "repeated work" is a form of rework/extra processing (waste)

and its elimination is the goal of optimization.

Section 2.3.2

Optimize and automate: "Optimization means to make something as effective and useful as it needs to be. Before an activity can be effectively automated

it should be optimized to whatever extent is possible and reasonable." The act of removing repeated work is a form of optimization.