30 Questions — ITIL 5 – Master : Certified ITIL Master - Domain 9 - Strategic Direction Setting and Governance

Expand any question to reveal the correct answer and explanation.

1. 1 An organization is using Wardley mapping to evaluate its digital strategy. They identify a core component that has moved from 'Custom Built' to 'Product'. According to ITIL 5 strategic principles, what is the most likely strategic implication of this movement?

   Consider how the nature of competition changes as a technology matures and becomes more standardized.

   The organization should shift focus from differentiation to operational efficiency and cost optimization for this component.

   Movement toward 'Product' or 'Commodity' indicates increasing stabilization, where competitive advantage shifts from innovation to efficiency and scale.

   • ✗ The organization must increase investment in internal R&D to maintain a unique market position for the component.

     Investing heavily in R&D for a component that has evolved into a standardized product often leads to 'reinventing the wheel' and wasted resources.

   • ✗ The component should be moved to the 'Discover' stage of the Product and Service Lifecycle to identify new user needs.

     The 'Discover' stage is typically for identifying new opportunities, whereas evolution to a product implies the need is already well-understood and defined.

   • ✗ Governance should be tightened to prevent any further evolution toward 'Commodity' status to protect intellectual property.

     Attempting to halt natural evolution in a Wardley map is often futile and prevents the organization from leveraging the benefits of standardization.

2. 2 In the context of Hoshin Kanri, which activity best describes the 'Catchball' process during strategic direction setting?

   Focus on the iterative, two-way nature of aligning goals in a modern digital organization.

   A multi-level negotiation to ensure strategic objectives are realistic and aligned across the hierarchy.

   Catchball is the iterative dialogue between different levels of management to refine goals and ensure mutual buy-in.

   • ✗ A top-down mandate where the board dictates specific KPIs to department heads without feedback loops.

     Hoshin Kanri rejects rigid top-down mandates in favor of collaborative alignment, making a one-way directive incorrect.

   • ✗ A method for identifying and 'tossing' risks between the first and second lines of defense in the governance model.

     While risk management is part of governance, 'Catchball' refers specifically to strategy deployment and goal alignment rather than risk transfer.

   • ✗ The process of monitoring strategic execution and reporting variances back to the board of directors.

     Monitoring is an output-focused governance activity, whereas Catchball is a collaborative planning and alignment activity.

3. 3 A Board of Directors is performing the 'Evaluate' activity of the ITIL 5 governance model. Which action are they most likely taking?

   Think about the phase of governance that focuses on making decisions based on stakeholder needs and environmental analysis.

   Assessing the current and future needs of stakeholders to determine strategic direction and investment priorities.

   Evaluation involves analyzing internal and external factors to make informed choices about the organization's future path.

   • ✗ Setting policies and establishing the strategic objectives for the executive leadership team to follow.

     Setting policies and objectives is part of the 'Direct' activity, which provides the framework for execution.

   • ✗ Comparing actual performance metrics against the defined strategic OKRs to identify deviations.

     Measuring performance against objectives is the 'Monitor' activity, which focuses on tracking progress.

   • ✗ Managing the day-to-day operations of the digital product and service value streams.

     Daily operational management is a management function, not a board-level governance activity.

4. 4 When cascading OKRs from the corporate level to a digital product team, which risk is most prevalent if the alignment is not 'complexity-ready'?

   Reflect on how Volatility, Uncertainty, Complexity, and Ambiguity (VUCA) affect long-term goals.

   Operational teams may focus on rigid outputs that no longer support the evolving strategic intent in a VUCA environment.

   In complex environments, rigid cascading can lead to 'mechanical' alignment where teams meet targets that are no longer relevant to value creation.

   • ✗ The organization will fail to meet the 70\% pass mark required for ITIL 5 Strategic Leader certification.

     Certification pass marks are educational requirements and not an operational risk associated with strategic cascading.

   • ✗ The Three Lines of Defence model will collapse because the first line will lack clear reporting lines to the board.

     OKR cascading affects strategic alignment; the Three Lines of Defence model is a structural governance framework for risk and control.

   • ✗ Product managers will be unable to use Wardley mapping because OKRs focus only on financial metrics.

     While a narrow focus is a risk, Wardley mapping can still be used regardless of the specific nature of the OKRs.

5. 5 In the Three Lines of Defence model, which function would typically be classified as the 'Second Line'?

   Differentiate between those who 'do' the work, those who 'oversee' the risk of that work, and those who provide 'independent' assurance.

   A centralized Risk and Compliance department that establishes frameworks and monitors the first line.

   The second line provides oversight, expertise, and challenge to the first-line operations regarding risk and compliance.

   • ✗ A DevOps team responsible for the day-to-day delivery and support of a high-velocity digital product.

     Teams directly responsible for delivery and operational risk management constitute the first line of defense.

   • ✗ An independent Internal Audit function that reports directly to the Board's audit committee.

     Internal Audit provides independent assurance and is defined as the third line of defense.

   • ✗ The Board of Directors itself, which is responsible for the overall governance of the organization.

     The Board is the body to which all lines report; it is the ultimate authority over the governance framework, not a 'line' itself.

6. 6 An organization is developing a strategy map using the Balanced Scorecard framework. In which perspective would 'Improving Team Collaboration for AI Adoption' most appropriately reside?

   Think about which perspective deals with the foundational capabilities, culture, and skills of the workforce.

   Learning and Growth

   This perspective focuses on the intangible assets, culture, and capabilities needed to drive long-term strategic success.

   • ✗ Internal Business Process

     This perspective focuses on the efficiency and quality of the processes that create and deliver value, rather than the underlying culture.

   • ✗ Customer

     The Customer perspective focuses on the value proposition and outcomes delivered to external stakeholders and users.

   • ✗ Financial

     The Financial perspective focuses on the economic outcomes, such as ROI or revenue growth, expected from the strategy.

7. 7 Which statement best describes the relationship between 'Vision' and 'Strategy' in ITIL 5 Strategic Direction Setting?

   Consider the hierarchy of strategic intent, from the broad aspiration to the plan for getting there.

   Vision defines the desired future state, while Strategy provides the high-level plan to navigate toward that state.

   Vision is the 'where' and strategy is the 'how', providing the direction and decision-making framework to achieve the goal.

   • ✗ Vision and Strategy are identical concepts and can be used interchangeably in board-level reporting.

     Mixing these terms can lead to confusion, as one is an aspirational state and the other is a plan of action.

   • ✗ Strategy is developed first to determine what the organization's Vision should be in an AI-enabled market.

     The vision usually precedes the strategy, acting as the North Star that the strategy is designed to reach.

   • ✗ Vision is a tactical objective (KR), whereas Strategy is a broad organizational objective (O) in the OKR framework.

     OKRs are a tool for executing strategy; the vision is a higher-level aspirational statement above the OKR structure.

8. 8 A Strategic Leader is using Wardley mapping and notices a 'pipeline' component that is becoming a 'commodity'. What is a major risk of continuing to custom-build this component?

   Think about the opportunity cost of 'reinventing the wheel' when standardized solutions are readily available.

   The organization will incur high maintenance costs and suffer from 'toil' while competitors leverage cheaper, faster standardized options.

   Custom-building components that are available as commodities creates technical debt and prevents the organization from focusing on unique value.

   • ✗ The board will lose visibility into the 'Evaluate' stage of the governance model because the component is too common.

     The commonality of a component does not affect the board's structural capability to evaluate stakeholder needs.

   • ✗ The Three Lines of Defence will become redundant because commoditized components do not require risk management.

     Commoditized services (like public cloud) still carry significant risks that require robust governance and oversight.

   • ✗ Hoshin Kanri Catchball will be impossible because teams only focus on innovative 'Genesis' stage components.

     Catchball is used to align goals across all types of work, regardless of where they sit on a Wardley map.

9. 9 In the ITIL 5 Strategic Direction Setting process, 'Value-Stream Metrics' at the portfolio level are primarily used to:

   Focus on the 'holistic' and 'end-to-end' nature of value streams at the highest organizational level.

   Measure the end-to-end flow of value and identify strategic bottlenecks across different business units.

   Portfolio-level value stream metrics help leaders see if the overall system is delivering value effectively across multiple product teams.

   • ✗ Replace individual performance appraisals for service desk agents in the first line of defense.

     Portfolio metrics focus on system-wide value flow, not the performance management of individual operational staff.

   • ✗ Automatically generate board reports using AIOps without human intervention or evaluation.

     While AIOps helps, board-level governance still requires human evaluation and 'monitor' activities for accountability.

   • ✗ Ensure that the 'Discover' stage of the lifecycle is completed within 360 minutes to match exam durations.

     Exam durations are irrelevant to the actual strategic management of product and service lifecycles.

10. 10 A board is 'evaluating' a proposal to adopt a new AI-augmented customer service platform. Which question is most relevant to the 'Evaluate' activity of governance?

    Recall that board-level governance focuses on 'big picture' alignment with vision, purpose, and stakeholder value.

    Does this investment align with our organizational purpose and the evolving expectations of our key stakeholders?

    Evaluation is concerned with ensuring strategic choices satisfy the needs and values of the organization and its stakeholders.

    • ✗ Which specific management practice (e.g., Incident Management) will be most affected by the AI implementation?

      Analyzing specific practice impacts is usually a management or tactical planning activity rather than a board-level evaluation.

    • ✗ Has the technical implementation been completed according to the project plan and timeline?

      Tracking implementation completion is part of the 'Monitor' activity, looking at past and current performance.

    • ✗ What are the precise technical requirements for the APIs needed to integrate the AI with the legacy CRM?

      Technical API requirements are a 'Design' or 'Build' lifecycle activity performed by technical teams, not the board.

11. 11 Strategic Direction Setting in ITIL 5 emphasizes that 'Purpose' is distinct from 'Strategy' because Purpose:

    Think about the deepest motivation for an organization's existence beyond just making profit or plans.

    Explains why the organization exists and the positive impact it intends to have on the world.

    Purpose provides the 'why' that transcends specific products or strategies, acting as a permanent anchor for the organization.

    • ✗ Is a time-bound set of measurable results (KRs) that must be achieved within a single fiscal year.

      Measurable results are part of the OKR framework used to execute strategy, whereas purpose is much broader and more enduring.

    • ✗ Identifies the specific competitors that the organization will target for disruption using AI.

      Targeting competitors is a strategic choice (the 'how'), whereas purpose focuses on the organization's own reason for being.

    • ✗ Is the document that describes the 'Target Operating Model' (TOM) for the digital estate.

      The TOM is a structural design of how the organization works, which is an output of strategy implementation, not the purpose itself.

12. 12 When using Wardley mapping to drive strategy, 'Inertia' refers to:

    Consider why established companies often struggle to adopt new technologies that disrupt their current profit centers.

    The internal resistance to change that arises when an organization's existing success is threatened by evolution.

    Inertia is a strategic challenge where organizations cling to old models (e.g., custom-built systems) despite new, more efficient commodities.

    • ✗ The speed at which a component moves from 'Genesis' to 'Commodity' on the map axis.

      The speed of movement is called 'Evolution', whereas inertia is the force that opposes or slows that movement.

    • ✗ The total number of value streams that are currently inactive in the service value system.

      Inertia in a strategic context relates to the dynamics of competition and organizational change, not simple activity counts.

    • ✗ The governance policy that requires all AI projects to be evaluated by the board before proceeding.

      Governance policies are intentional 'Direct' activities, whereas inertia is often an unintentional or cultural barrier to evolution.

13. 13 A board is 'Directing' the organization by establishing a new digital ethics charter. According to ITIL 5, this is an example of:

    Focus on the board's role in establishing the 'guardrails' and 'policies' for the organization.

    Setting a governance framework that influences all downstream strategic decisions and operational behaviors.

    The 'Direct' activity involves establishing the policies and constraints within which the organization must operate.

    • ✗ Monitoring the compliance of AI models with existing data privacy regulations like GDPR.

      Monitoring is about checking adherence to existing rules, whereas 'Direct' is about creating the rules and expectations.

    • ✗ Evaluating the market potential for a new ethically-sourced data product.

      Evaluating market potential is the 'Evaluate' activity, which informs the direction the board will eventually set.

    • ✗ Cascading specific OKRs related to carbon-aware operations to the infrastructure team.

      Cascading OKRs is a strategy deployment and implementation activity usually handled by management, guided by the board's direction.

14. 14 Which component of the Balanced Scorecard would most likely track 'Time-to-Market for New Digital Features'?

    Consider which perspective focuses on how effectively an organization operates its value-adding activities.

    Internal Business Process

    Efficiency metrics related to the speed and quality of organizational processes belong in this perspective.

    • ✗ Financial

      While time-to-market affects the bottom line, the direct measurement of process speed is an operational/internal metric.

    • ✗ Customer

      The Customer perspective would track outcomes of that speed, such as customer satisfaction or market share, rather than the process itself.

    • ✗ Learning and Growth

      This perspective tracks the skills and culture that *enable* better processes, rather than the performance of the processes themselves.

15. 15 In the context of OKR cascading, what is the primary difference between a 'Strategic Objective' and a 'Key Result'?

    Think about the 'what' vs. the 'how' and 'how much' in the OKR framework.

    An Objective is a qualitative statement of intent, while a Key Result is a quantitative metric that proves the objective was met.

    This distinction ensures that the organization has both a clear 'where' (Objective) and a measurable 'how much' (Key Result).

    • ✗ An Objective is set by the board, while Key Results are only used by the first line of defense.

      Key Results are used at every level of the organization to track progress against Objectives.

    • ✗ A Key Result is a permanent goal, whereas an Objective is revised every 90 minutes during a strategy session.

      Key Results are typically time-bound to the objective's cycle (e.g., quarterly), and objectives are far more enduring than 90 minutes.

    • ✗ There is no difference; ITIL 5 uses these terms interchangeably to support high-velocity environments.

      Differentiating between intent and measurement is critical for effective strategy execution and accountability.

16. 16 Strategic Direction Setting requires 'Governance at Board Level' to use the 'Three Lines of Defence'. What is the board's primary responsibility regarding the 'Third Line'?

    Consider the need for unbiased, independent 'eyes and ears' for the board.

    Ensuring its independence and receiving objective assurance on the effectiveness of governance, risk, and control.

    The third line (Audit) must be independent of management to provide the board with unbiased reporting on the other two lines.

    • ✗ Directly managing the day-to-day internal audit schedule and choosing specific files for review.

      While the board oversees the function, getting involved in day-to-day scheduling is a management task that can compromise independence.

    • ✗ Setting the risk appetite that the first line must follow when deploying AI platforms.

      Setting risk appetite is a 'Direct' governance activity that applies to the *entire* organization, not just the third line.

    • ✗ Training the DevOps teams in the first line on how to use Wardley mapping and Hoshin Kanri.

      Training is a management and human resources activity, not an oversight responsibility related to the third line of defense.

17. 17 When an organization uses Wardley mapping to align technology with strategy, what does the vertical axis (Value Chain) represent?

    Think about how 'close' a component is to the customer's actual experience.

    The visibility of a component to the end-user or stakeholder.

    Components at the top of the map are highly visible and direct value drivers, while those at the bottom are invisible infrastructure.

    • ✗ The degree of technical maturity of a specific digital product.

      Technical maturity (evolution) is represented by the horizontal axis, not the vertical axis.

    • ✗ The total financial cost of developing and supporting a service.

      While cost can be mapped, the standard Wardley vertical axis specifically represents visibility and dependency.

    • ✗ The hierarchical reporting structure of the IT department.

      A Wardley map is a landscape of value and evolution, not an organizational chart or reporting hierarchy.

18. 18 Which board-level governance activity is most closely linked to 'Accountability' for strategic outcomes?

    Consider which activity involves checking if the 'Directions' given by the board are actually being achieved.

    Monitor

    Monitoring performance against expectations is how the board holds management accountable and identifies the need for course correction.

    • ✗ Discover

      Discover is a lifecycle activity focused on identifying needs, whereas governance focuses on evaluation, direction, and monitoring.

    • ✗ Catchball

      Catchball is a collaborative alignment technique; while it supports accountability, the formal governance function for it is 'Monitor'.

    • ✗ Evolution

      Evolution is the natural or strategic movement of components in a market, not a governance activity.

19. 19 Strategy Maps are used to communicate how an organization creates value. What is the standard flow of 'cause and effect' through the perspectives?

    Consider how investing in employees' skills eventually leads to improved bottom-line results.

    Learning and Growth $\rightarrow$ Internal Processes $\rightarrow$ Customer $\rightarrow$ Financial

    This bottom-up logic shows how improved skills and culture drive better processes, which satisfy customers and lead to financial success.

    • ✗ Financial $\rightarrow$ Customer $\rightarrow$ Internal Processes $\rightarrow$ Learning and Growth

      This top-down sequence reflects how goals are *set*, but strategy maps show how value is *created* from the bottom up.

    • ✗ Internal Processes $\rightarrow$ Learning and Growth $\rightarrow$ Financial $\rightarrow$ Customer

      Learning and growth is the foundation upon which internal processes are built, not the other way around.

    • ✗ Strategy $\rightarrow$ Governance $\rightarrow$ Transformation $\rightarrow$ Master

      These are designations or streams in the ITIL qualification scheme, not perspectives of a Strategy Map.

20. 20 Hoshin Kanri emphasizes 'Focus' in Strategic Direction Setting. This is primarily achieved by:

    Think about the problem of an organization trying to do 'too many things' at once.

    Selecting a small number of breakthrough objectives that will have the most significant impact on the organization's future.

    Concentrating on 'fewer but better' goals prevents organizational burnout and ensures resources are targeted at the most critical transformations.

    • ✗ Ensuring that every single operational KPI is monitored by the board during their monthly sessions.

      The board should focus on strategic outcomes; tracking every operational KPI creates information overload and 'micromanagement'.

    • ✗ Using Wardley mapping to identify all 34 management practices that need to be upgraded for AI.

      While practices matter, Hoshin Kanri is about strategic focus, not necessarily mapping all possible management practices.

    • ✗ Restricting the organization's mission to only one digital product to simplify the value stream.

      Strategic focus refers to prioritizing goals, not necessarily limiting the organization's entire portfolio to a single product.

21. 21 A board is evaluating a 'Strategic Risk Register'. Which concept defines the maximum amount of risk the organization is prepared to accept before action is deemed necessary?

    Distinguish between the broad 'desire' for risk and the specific 'thresholds' for variance.

    Risk Appetite

    Risk appetite is a strategic statement of the level of risk an organization is willing to pursue or retain in pursuit of its objectives.

    • ✗ Risk Tolerance

      Tolerance is the allowable variance around the appetite (e.g., specific thresholds for operational deviations).

    • ✗ Catchball

      Catchball is an alignment process for strategy, not a definition of risk levels.

    • ✗ Scenario Planning

      Scenario planning is a *tool* used to identify risks and test resilience, not a limit for risk acceptance.

22. 22 In ITIL 5 Strategic Leadership, 'Operational Resilience' at the board level is best supported by:

    Think about proactive tools used to explore 'extreme but plausible' future events.

    Scenario planning to test the organization's response to plausible digital disruptions.

    Testing various 'what if' scenarios allows the board to evaluate the organization's ability to survive and recover from major shocks.

    • ✗ Hiring more service desk staff to ensure incidents are resolved within defined SLAs.

      Operational staff increases address capacity, but strategic resilience requires deeper planning for systemic failure and disruption.

    • ✗ Ensuring all servers are relocated to an on-premise data center to avoid cloud dependency.

      Resilience is about the ability to adapt and recover, not necessarily avoiding modern delivery models like the cloud.

    • ✗ Decreasing the number of board meetings to allow executives more time for day-to-day operations.

      Effective governance requires *more* focus from the board on risk and resilience, not less.

23. 23 What is a 'Strategic Objective' within the Kaplan & Norton Strategy Map framework?

    Focus on the 'qualitative goal' that represents a piece of the overall strategic plan.

    A concise statement describing a specific goal that must be achieved to execute the strategy.

    Objectives in a strategy map are the building blocks that, when linked, tell the story of how value is created.

    • ✗ The quantitative target (e.g., $10M revenue) that is attached to a specific perspective.

      Targets are the 'how much', while the Objective is the 'what' we are trying to achieve (the goal statement itself).

    • ✗ A list of all the tasks required to transition a product into the 'Operate' lifecycle stage.

      Task lists are tactical/operational, whereas strategic objectives focus on broader outcomes and capabilities.

    • ✗ The board's final 'Evaluate' report issued at the end of a fiscal year.

      An evaluation report is an output of a governance activity, not a component of the strategy map itself.

24. 24 When cascading OKRs, 'Stretch Goals' are often used. What is the primary purpose of a stretch goal in Strategic Direction Setting?

    Consider why a leader might set a goal that is intended to be only 70% achieved.

    To encourage innovative thinking and breakthrough performance by setting targets that seem initially impossible.

    Stretch goals (Moonshots) push teams beyond incremental improvements and force them to rethink their ways of working.

    • ✗ To ensure that management can justify withholding bonuses when teams only achieve 90\% of their targets.

      OKRs are meant for alignment and growth, not as a primary tool for punitive performance management.

    • ✗ To fill the time during the 'Catchball' process if managers cannot agree on realistic targets.

      Stretch goals are a deliberate strategic choice, not a filler for inefficient negotiation processes.

    • ✗ To provide a buffer for the Three Lines of Defence in case the first line fails to identify a risk.

      Stretch goals are about performance and innovation, while the lines of defense are about control and assurance.

25. 25 How does ITIL 5 suggest the 'Board of Directors' should handle 'AI Governance' within their strategic direction?

    Think about the 'high-level oversight' required for responsible technology use.

    By establishing ethical guardrails, accountability frameworks, and ensuring AI initiatives align with organizational values.

    AI governance at the board level is about oversight, ethics, and value alignment rather than technical coding or model selection.

    • ✗ By personally reviewing and approving the source code for all generative AI models used by the firm.

      Reviewing code is a highly technical task for developers or specialized auditors, not a board-level strategic activity.

    • ✗ By outsourcing all AI-related decisions to the second line of defense to avoid personal liability.

      The board cannot delegate its ultimate accountability for the organization's governance and strategic direction.

    • ✗ By ignoring AI until it reaches the 'Commodity' stage on the Wardley map to minimize early-stage risk.

      Ignoring transformative technology like AI can lead to strategic obsolescence and 'inertia' risks.

26. 26 In Strategic Direction Setting, what role does 'Digital Transformation' play in relation to Strategy?

    Consider the difference between 'the map' (Strategy) and 'the journey' (Transformation).

    Transformation is the process of executing the strategy to move the organization from its current state to its envisioned future state.

    Strategy is the plan; transformation is the actual fundamental change in how the organization operates to deliver on that plan.

    • ✗ Transformation is a standalone project that happens after the strategy is fully completed and archived.

      Transformation is ongoing and iterative, deeply linked with the continuous development and implementation of strategy.

    • ✗ Transformation is only concerned with the 'Build' and 'Acquire' stages of the Product and Service Lifecycle.

      Strategic transformation spans the entire lifecycle, from strategy authoring to service delivery and continual improvement.

    • ✗ Transformation is the name of the bridge module used to transition from ITIL v3 to ITIL 5.

      While 'Transformation' is a module name, it refers to the organizational capability, not just a certification bridge.

27. 27 A board is 'Monitoring' the strategic performance of a portfolio. They notice that while 'Financial' goals are met, 'Learning and Growth' metrics are failing. What does this suggest according to Strategy Mapping logic?

    Think about lead vs. lag indicators in the Balanced Scorecard.

    Short-term financial success may be unsustainable because the foundational capabilities of the organization are eroding.

    Strategy maps show that current learning and growth are the lead indicators for future financial success.

    • ✗ The organization should immediately stop all 'Learning and Growth' activities to focus even more on 'Financial' goals.

      Neglecting foundational capabilities often leads to long-term failure despite short-term gains.

    • ✗ The 'Monitor' activity is faulty because it is impossible for these two perspectives to show different results.

      Lagging indicators (Financial) and leading indicators (Learning) often show divergent results during transition periods.

    • ✗ The organization has successfully reached the 'ITIL Master' level and no further monitoring is required.

      Monitoring is a continuous governance activity regardless of the designations held by organizational members.

28. 28 When defining 'Mission' as part of Strategic Direction Setting, an organization focuses on:

    Distinguish between the organization's 'current business' and its 'future dream'.

    What the organization does today, who it serves, and how it delivers value in the present.

    The mission is the 'current reality' and day-to-day operation, whereas the vision is the 'future aspiration'.

    • ✗ The long-term movement of its products from 'Genesis' to 'Custom Built' on a Wardley map.

      Product evolution is a strategic insight, whereas the mission is a broader statement of purpose and current operations.

    • ✗ The specific list of 160 practice test questions that employees must pass to certify in ITIL 5.

      Certification requirements are part of a training plan, not the mission of a commercial or public organization.

    • ✗ Ensuring the Three Lines of Defence never interact with the first line to maintain total secrecy.

      The lines of defense must collaborate and communicate effectively; secrecy would undermine the governance model.

29. 29 A Board of Directors provides 'Direction' to the CEO by stating: 'All digital products must utilize carbon-aware hosting by 2027.' This is an example of:

    Think about the 'what' vs 'how' and the role of the board in setting non-negotiable goals.

    A strategic constraint that ensures sustainability goals are embedded into product delivery and operations.

    Governance through 'Direction' sets the boundaries and required outcomes that management must navigate.

    • ✗ A tactical 'Support' activity to help users reduce their personal carbon footprint.

      Supporting users is an operational activity, whereas a board-level mandate for the entire product line is strategic governance.

    • ✗ An 'Evaluate' activity where the board is testing the market's appetite for green technology.

      Evaluation happens *before* a decision is made; once the board sets a requirement (2027 mandate), they are 'Directing'.

    • ✗ The 'Acquire' lifecycle stage where the organization is purchasing new renewable energy credits.

      The board sets the policy; the 'Acquire' stage is the management and execution of that policy by the procurement or IT teams.

30. 30 In Wardley mapping, 'Climatic Patterns' refer to:

    Think about universal forces (like gravity) that affect every competitor in a market.

    Rules of the market landscape that apply to all players and are outside the organization's direct control.

    Understanding climatic patterns (like 'efficiency enables higher-order systems') helps leaders anticipate and adapt to market shifts.

    • ✗ The weather-related risks that affect the physical security of the organization's on-premise data centers.

      In Wardley mapping, 'climate' is a metaphor for market and technology dynamics, not actual meteorological conditions.

    • ✗ The internal cultural mood of the workforce regarding the adoption of high-velocity DevOps practices.

      Cultural mood is an internal factor; climatic patterns are external market forces that affect everyone in that industry.

    • ✗ A specific type of 'Strategy Map' used by organizations in the energy and sustainability sector.

      Climatic patterns are a concept within Wardley mapping, not a separate type of Kaplan & Norton strategy map.