30 Questions — ITIL 5 – Strategic Leader : Certified ITIL Strategic Leader - Domain 1 - Strategic Direction Setting and Governance

Expand any question to reveal the correct answer and explanation.

1. 1 A multinational corporation is implementing the 'Three Lines of Defence' model as part of its board-level governance. Where should the function of 'Operational Risk Management Oversight' be positioned to ensure strategic independence from delivery teams?

   Consider which line 'oversees' the implementation of risk management practices without actually performing the audit.

   The Second Line of Defence

   This line provides the expertise, support, and challenge to the first line by establishing policies and overseeing compliance and risk management.

   • ✗ The First Line of Defence

     The first line is responsible for day-to-day execution and immediate control of risks, rather than independent oversight.

   • ✗ The Third Line of Defence

     This line is reserved for independent internal audit and assurance, which reports directly to the board to validate the effectiveness of the first two lines.

   • ✗ The Board of Directors directly

     While the board is accountable for the overall framework, the specific oversight function is a management activity residing in the second line.

2. 2 When utilizing Wardley Mapping to determine strategic direction, an organization identifies a core component in the 'Genesis' stage. What strategic risk is most prominently associated with this classification?

   Think about the level of predictability and 'newness' at the very beginning of a component's evolution.

   High uncertainty and high probability of failure

   The genesis stage represents the experimental and novel phase where the path to value is undefined and extremely risky.

   • ✗ Market saturation and diminishing returns

     Saturation is typical of components in the 'Commodity' or 'Utility' stages of evolution.

   • ✗ Lack of supplier competition leading to high costs

     High supplier cost due to lack of competition is usually a risk in the 'Custom Built' or early 'Product' stages.

   • ✗ Inefficient process flow due to excessive standardization

     Standardization is the opposite of genesis, which is characterized by the absence of established rules or forms.

3. 3 In the context of the Direct-Monitor-Evaluate (DME) model, which specific activity is being performed when the board analyzes digital disruption indicators to adjust the enterprise's long-term digital vision?

   This step involves making a value judgment about the external environment before giving new instructions.

   Evaluate

   Evaluation is the assessment of external and internal environments to determine if current strategies remain valid or need fundamental shifts.

   • ✗ Direct

     Directing involves setting policies and priorities after the evaluation has provided a clear path forward.

   • ✗ Monitor

     Monitoring is the ongoing observation of current performance against established targets.

   • ✗ Govern

     Governance is the overarching system, while evaluation is a specific functional step within that system's loop.

4. 4 An organization is struggling with 'Strategy Cascading.' They decide to use Hoshin Kanri to align their digital transformation goals. What is the primary purpose of the 'Catchball' process within this framework?

   Think about the metaphor of passing a ball back and forth to reach a common goal.

   To create a bidirectional flow of ideas and consensus on strategic objectives

   Catchball facilitates a dialogue between levels of management to refine goals and ensure they are achievable and understood.

   • ✗ To ensure top-down command and control over department heads

     Catchball is designed to avoid rigid command and control by fostering dialogue and shared understanding.

   • ✗ To identify which employees are responsible for failed initiatives

     Hoshin Kanri focuses on systemic alignment and improvement, not individual blame or performance appraisal.

   • ✗ To automate the reporting of KPIs to the executive board

     Catchball is a human communication process, not a technical reporting automation tool.

5. 5 ITIL 5 Strategic Leader defines 'Risk Appetite' at the board level. If a board states they have a 'low risk appetite for digital ethics violations' but the organization accepts a project using black-box AI without transparency, what has been breached?

   This term refers to the measurable thresholds that define where the 'appetite' ends.

   The Risk Tolerance

   Tolerance is the specific maximum amount of variation an organization is willing to accept relative to its goals; a breach here signifies a failure to adhere to the stated appetite.

   • ✗ The Risk Management Practice

     While the practice may be failing, the specific boundary that defines 'what is allowed' is the tolerance.

   • ✗ The Strategy Map

     The strategy map visualizes objectives but does not typically define the specific numerical or qualitative boundaries of risk.

   • ✗ The Mission Statement

     The mission defines purpose, while risk boundaries are operational and strategic controls.

6. 6 When developing a 'Digital Operating Model,' what is the significance of the 'Build-Buy-Partner' decision-making framework at the Strategic Leader level?

   Think about how an organization decides to acquire the 'muscle' needed to perform its tasks.

   It determines how the organization will source its capabilities to deliver on digital strategy

   This framework helps leaders decide whether to develop internal talent, purchase solutions, or leverage ecosystems to execute strategy.

   • ✗ It is purely a financial exercise to reduce IT expenditures

     Strategic decisions involve value, risk, and capability, not just cost reduction.

   • ✗ It is a tactical procurement step performed only after the product is designed

     This decision is strategic and influences the architecture and operating model from the outset.

   • ✗ It replaces the need for a Vision and Mission statement

     The framework supports the vision and mission but does not replace them.

7. 7 A CEO states: 'We will be the most carbon-neutral technology provider in Europe by 2030.' According to the ITIL 5 Strategic Leader framework, this statement most accurately represents a:

   This is a high-level, long-term, and aspirational goal for the organization's future.

   Vision

   A vision is an aspirational future state that the organization intends to achieve over a longer timeframe.

   • ✗ Mission

     A mission describes what the organization does today and for whom; this statement is future-oriented.

   • ✗ Purpose

     Purpose explains the 'why' or the reason for being, whereas this specifies a concrete future target.

   • ✗ Operating Model

     An operating model is the 'how'—the structure and processes—not the aspirational goal.

8. 8 In OKR cascading, an 'Alignment Trap' occurs when lower-level teams' objectives are $100\%$ derived from top-level leadership without bottom-up input. Why is this problematic in a high-velocity environment?

   Think about what happens to 'agility' when all decisions come from the top down.

   It stifles local innovation and prevents teams from responding to immediate customer feedback

   Autonomy is essential for teams to adapt strategy to the realities they face on the 'front lines' of service delivery.

   • ✗ It simplifies the reporting process too much

     Simplifying reporting is usually a benefit, not a trap; the issue here is lack of innovation.

   • ✗ It ensures that the board has full control over all digital investments

     While it might provide control, the question asks why it is *problematic*, implying a negative outcome for agility.

   • ✗ It makes the Balanced Scorecard impossible to measure

     A Balanced Scorecard can still be measured, but the underlying data would lack the insights of frontline reality.

9. 9 According to ITIL 5, how does 'AI Governance' at the board level differ from standard IT Governance?

   Think about the 'responsible' and 'ethical' aspects mentioned in the source material.

   AI Governance adds an emphasis on digital ethics, transparency, and the 'black-box' risk

   Governance for AI must address the unique risks of opaque decision-making and ethical implications that traditional software does not have.

   • ✗ AI Governance is only concerned with software licensing costs

     Licensing is a tactical procurement concern, not a strategic governance one.

   • ✗ AI Governance removes the need for human oversight entirely

     ITIL 5 emphasizes 'People + AI' and human accountability, not removing it.

   • ✗ AI Governance is a sub-set of the Incident Management practice

     Governance is a strategic capability, not a single operational practice.

10. 10 Which component of the ITIL Strategy Management Model is primarily responsible for environmental scanning and PESTLE analysis?

    Look for the phase that focuses on 'observing' and 'orienting' before acting.

    Strategy Development Lifecycle

    This lifecycle involves observing and orienting the organization based on external factors like PESTLE (Political, Economic, Social, Technological, Legal, Environmental).

    • ✗ Strategy Implementation Lifecycle

      Implementation is about executing the plan, not the initial analysis and direction setting.

    • ✗ The Governance Layer

      The governance layer provides oversight, while the development lifecycle performs the actual scanning and analysis.

    • ✗ Continual Improvement Model

      While improvement is continuous, the specific task of scanning the environment to set new direction is a strategy development task.

11. 11 A board is using a 'Balanced Scorecard' to monitor its digital strategy. They notice that 'Customer Satisfaction' is high, but 'Internal Process Efficiency' is low. What is the most likely strategic outcome?

    Consider the long-term viability of a service that satisfies users but is a 'mess' behind the scenes.

    The organization is achieving results but potentially at a non-sustainable cost or level of effort

    Balanced Scorecards highlight that excellence in one area (Customer) can hide fatal flaws in another (Internal Operations).

    • ✗ The strategy is a complete success because the customer is happy

      Strategy must be sustainable; low internal efficiency often leads to long-term failure or high costs.

    • ✗ The 'Financial' perspective will automatically improve next quarter

      Low process efficiency usually harms the financial perspective due to high waste and operational costs.

    • ✗ The board should ignore the process perspective and focus on the mission

      Ignoring perspectives defeats the purpose of a *balanced* approach to governance.

12. 12 An organization adopts 'Wardley Mapping' to understand its 'Value Chain.' They find a component that is highly standardized and widely available as a utility. How should this affect their 'Build vs Buy' strategy?

    What is the most efficient way to handle something that everyone else has and is essentially a 'plug-and-play' service?

    They should outsource or buy it as a utility service

    Commoditized components should be acquired as cheaply and efficiently as possible, typically from external providers.

    • ✗ They should build it internally to gain a competitive advantage

      Building a commodity internally is a waste of resources, as it provides no differentiation or advantage.

    • ✗ They should treat it as a 'Genesis' project

      Genesis is for brand new, experimental components, the opposite of a standardized utility.

    • ✗ They should ignore the component as it has no value

      Even utility components have value in the chain, but they do not require strategic focus for innovation.

13. 13 Strategic Direction Setting often uses 'Strategy Maps' (Kaplan & Norton). Which perspective in this map is typically considered the 'foundation' that enables all others?

    Think about the 'bottom' layer of the map where people, skills, and culture reside.

    The Learning and Growth Perspective

    This perspective covers culture, people, and technology, which are the fundamental enablers for everything else in the organization.

    • ✗ The Financial Perspective

      Financial outcomes are usually the *result* or top-level goal, not the foundation.

    • ✗ The Customer Perspective

      Customer satisfaction is an outcome of good internal processes and learning.

    • ✗ The Internal Process Perspective

      Processes are enabled by the learning and growth (people and tools) available.

14. 14 When a board 'Monitors' strategic progress in an AI-enabled environment, why is 'Observability' more important than traditional monitoring?

    Consider the challenge of managing 'black-box' systems where traditional 'pass/fail' checks don't tell the whole story.

    Observability allows the board to understand 'why' a complex system is behaving a certain way from its outputs

    In complex, non-linear AI systems, simply knowing *if* it is up is insufficient; leaders need to understand the internal state and decision logic.

    • ✗ Observability is just a new marketing term for Monitoring

      The two terms have distinct technical and strategic meanings in modern systems.

    • ✗ Observability makes it impossible to hide failures from the board

      While it increases transparency, its primary purpose is understanding complex system behavior, not just 'policing'.

    • ✗ Monitoring is only for technical teams, and Observability is only for boards

      Both are used across levels, but observability addresses the complexity the board must govern.

15. 15 The Strategic Leader certification emphasizes 'Digital Ethics.' If an organization prioritizes 'Profit' over 'Planet' in its strategy, which Industry context is it lagging in?

    This era is characterized by the 'triple bottom line' of Profit, People, and Planet.

    Industry 5.0

    Industry 5.0 introduces a core focus on sustainability, human-centricity, and balancing social/environmental impact with profit.

    • ✗ Industry 3.0

      Industry 3.0 was focused on automation and early computerization.

    • ✗ Industry 4.0

      Industry 4.0 focuses on the Internet of Things and smart systems, still largely output-centric.

    • ✗ The Service Value System

      This is an ITIL component, not an industrial era or context.

16. 16 In the 'Direct-Monitor-Evaluate' loop, which phase is most directly connected to 'Strategic Direction Setting'?

    This phase involves issuing the 'marching orders' for the entire organization.

    Direct

    Directing is where the board sets the mission, vision, and strategic priorities for the management to execute.

    • ✗ Monitor

      Monitoring is an oversight activity to check performance, not a direction-setting one.

    • ✗ Evaluate

      Evaluation informs the direction, but the 'Direct' phase is where the actual 'direction' is formally issued.

    • ✗ Assure

      Assurance is part of the audit/compliance function, not strategic direction.

17. 17 What is the primary strategic benefit of using 'Scenario Planning' in the Strategy Development Lifecycle?

    How does imagining different futures help a leader handle the 'Uncertainty' of the VUCA world?

    To build organizational resilience by preparing for multiple plausible future states

    Scenario planning helps leaders think through 'what if' situations, making them less reactive when disruption occurs.

    • ✗ To predict the exact future revenue with $100\%$ accuracy

      No strategic tool can predict the future with total accuracy, especially in VUCA environments.

    • ✗ To choose the single best path and ignore all other possibilities

      Scenario planning is about breadth and flexibility, not narrow focus on one single path.

    • ✗ To replace the need for Board Governance

      Scenario planning is a tool used *by* governance, not a replacement for it.

18. 18 Hoshin Kanri uses an 'X-Matrix.' Which quadrant of this matrix is used to connect 'Long-term Strategic Objectives' to 'Annual Objectives'?

    Think about how the matrix 'rotates' to show relationships between the 'what' and the 'how'.

    The South (Strategies)

    The South quadrant often lists the top-level breakthrough objectives or strategies.

    • ✗ The North (Results)

      The North quadrant typically lists the key performance indicators or results expected.

    • ✗ The East (Tactics)

      The East quadrant focuses on specific projects or annual tactics.

    • ✗ The West (Priorities)

      The West quadrant usually houses the long-term or multi-year priorities.

19. 19 Within the 'Three Lines of Defence,' why is it critical that Internal Audit (Third Line) remains separate from management functions?

    Consider what happens to an audit if the person doing the audit is also the person who did the work being checked.

    To ensure objective assurance can be provided to the board without conflict of interest

    Independence ensures that the audit is unbiased and that the auditor is not 'marking their own homework'.

    • ✗ To allow them to make daily operational decisions

      The third line must never make operational decisions to maintain its objective independence.

    • ✗ Because they don't have the technical skills to manage services

      The reason is purely about structural independence and integrity, not skill level.

    • ✗ To reduce the overall cost of the risk management framework

      Maintaining a third line often increases cost but is necessary for trust and governance.

20. 20 A board evaluates 'Value Stream Metrics' at the portfolio level. They find a significant bottleneck in the 'Transition' activity of the digital product lifecycle. What is the most likely strategic impact?

    Transition is the step that takes a product from 'built' to 'used by customers.' What happens if this is slow?

    Increased 'Time to Market' for new digital innovations

    Transition is the gate to live environments; a bottleneck here delays value realization and speed to market.

    • ✗ A decrease in the 'Financial' cost of product development

      Bottlenecks usually increase costs due to rework and delay.

    • ✗ Improved 'Employee Experience' for development teams

      Bottlenecks usually frustrate teams and harm the employee experience.

    • ✗ The board should ignore this as it is a tactical 'Operations' issue

      If the bottleneck affects strategic goals like 'Market Lead,' it is a board-level concern.

21. 21 In the ITIL Strategy Management Model, the 'Observe' phase of the development lifecycle primarily focuses on which of the following?

    This is the first step of a cognitive loop, similar to 'situational awareness'.

    Gathering data on market trends, competitor moves, and emerging technologies

    Observation is the intake of information from the environment to understand the current reality.

    • ✗ Writing the digital ethics policy

      Policy writing occurs in the 'Plan' or 'Direct' phases.

    • ✗ Allocating budget to specific OKRs

      Budgeting is part of implementation and decision-making, not just observation.

    • ✗ Terminating underperforming service contracts

      This is an operational or tactical execution step.

22. 22 Why does ITIL 5 Strategic Leader advocate for 'Strategic Communications' specifically to 'Investors' and 'Regulators'?

    Consider the growing importance of 'Planet' and 'Ethics' (ESG) to those who fund or oversee businesses.

    To build trust and demonstrate compliance with ESG and digital governance standards

    Modern governance requires proactive engagement with stakeholders who control capital and legal standing.

    • ✗ To trick them into thinking the organization is more profitable

      Strategy must be built on integrity and transparency, not deception.

    • ✗ To replace the need for internal status reports

      External communication is complementary to, not a replacement for, internal reporting.

    • ✗ Because they are the only people who understand the technology

      Communication is about alignment and trust, not just technical literacy.

23. 23 In Hoshin Kanri, the 'North' quadrant of the X-Matrix usually displays 'Results' or 'Key Performance Indicators.' If these are not achieved, where does the Strategic Leader look first according to the matrix's logic?

    Results are the outcome of specific actions or 'tactics' performed during the year.

    At the 'Tactics' in the East quadrant

    The East quadrant contains the projects and annual actions meant to produce the results; failure usually starts there.

    • ✗ At the 'Vision' on the company website

      The vision is too high-level to explain a single year's failure in KPI targets.

    • ✗ At the competitor's Wardley Map

      Internal failure to meet KPIs is first an execution/tactic issue, then a strategy issue.

    • ✗ At the First Line of Defence

      While relevant, the X-matrix specifically links results to the tactics designed to achieve them.

24. 24 Strategic Direction Setting requires 'Purpose' to be defined. How does 'Purpose' differ from 'Mission' in the ITIL 5 framework?

    One is about 'reason for being' and the other is about 'who we serve today'.

    Purpose is the 'why' the organization exists, while Mission is the 'what' it does and for whom

    Purpose is philosophical and foundational; Mission is more descriptive of current market activities.

    • ✗ There is no difference; they are synonyms

      ITIL 5 assigns specific nuances to each term to improve strategic clarity.

    • ✗ Purpose is only for non-profits, Mission is for corporations

      Both are applicable to all types of organizations in the modern era.

    • ✗ Mission is future-oriented, and Purpose is present-oriented

      Mission is present/short-term; Vision is future-oriented; Purpose is timeless.

25. 25 A board uses the 'Direct-Monitor-Evaluate' loop. During the 'Monitor' phase, they find that 'Digital Strategy' is being executed, but 'Operational Resilience' is dropping. What action should they take in the 'Evaluate' phase?

    How should a board react when their 'check-up' (Monitoring) shows that the ship is moving fast but is about to fall apart?

    Assess the gap between strategic intent and the current risk tolerance to determine if the strategy is too aggressive

    Evaluation must balance the 'push' for progress with the 'pull' of stability and risk management.

    • ✗ Nothing, as strategy execution is more important than resilience

      Lack of resilience is a strategic risk that can lead to catastrophic failure.

    • ✗ Fire the Head of Service Operations immediately

      The DME loop focuses on systemic adjustment and strategic direction, not individual personnel management.

    • ✗ Double the budget for the Digital Strategy initiatives

      Increasing budget might further destabilize resilience if the underlying strategy is flawed.

26. 26 Within Wardley Mapping, what is the 'User Need' and why is it placed at the top of the map?

    Think about why a service exists in the first place—everything starts with the person using it.

    It is the anchor that defines the value of all other components in the map

    Everything in a Wardley Map exists only to satisfy the user need; its position at the top shows visibility to the user.

    • ✗ It is the customer's budget, and it's at the top because money is the primary goal

      While money is a goal, the 'User Need' is the fundamental problem being solved for the customer.

    • ✗ It is the board's bonus structure, and it's at the top to ensure visibility to managers

      A Wardley Map is a customer-centric and value-chain tool, not an internal HR document.

    • ✗ It is a list of technical requirements from the IT department

      The user need is a business/customer-level requirement, not a technical specification.

27. 27 What is the primary risk of a board failing to establish a 'Risk Appetite' statement for AI-augmented strategies?

    What happens when a team doesn't know 'how much risk' they are allowed to take?

    Management will either be too cautious, missing opportunities, or too reckless, causing ethical/legal damage

    Without clear boundaries, teams lack the 'guardrails' to make consistent decisions aligned with the board's wishes.

    • ✗ The AI will stop working

      Technical performance is separate from governance standards and appetite.

    • ✗ The organization will be unable to hire AI engineers

      Hiring is influenced by many factors, but governance lack primarily affects decision quality, not just recruitment.

    • ✗ The 'Three Lines of Defence' model will automatically collapse

      The model can exist, but it will be 'flying blind' without the criteria to judge performance.

28. 28 How does ITIL 5's 'Strategic Direction Setting' incorporate 'Sustainability' into the governance framework?

    Think about the 'Planet' part of the 'Profit, People, Planet' triad.

    By making it a core pillar of the digital strategy and reporting on carbon-aware outcomes

    True strategic sustainability involves aligning technology delivery with environmental and social goals as a primary objective.

    • ✗ By adding it as a 'checkbox' at the end of the fiscal year

      Sustainability must be integrated into the core strategy, not treated as an afterthought.

    • ✗ By ignoring it unless mandated by the UK government

      ITIL 5 is a global framework that advocates proactive leadership in sustainability regardless of local law.

    • ✗ By outsourcing all high-carbon activities to other companies

      Strategic leadership involves total value chain accountability, not just hiding emissions in partners.

29. 29 If an organization uses OKRs to cascade strategy, what is the 'Key Result' part specifically designed to measure?

    Objectives are the 'Where do we go?' and this part is the 'How do we know we're there?'

    Measurable, time-bound outcomes that indicate progress toward the objective

    Key Results must be quantifiable so that success can be objectively verified without debate.

    • ✗ The aspirational goal we hope to achieve

      The goal is the 'Objective'; the 'Key Result' is the metric that proves the objective was met.

    • ✗ A list of tasks we plan to do next month

      Tasks are initiatives or actions; Key Results measure the *impact* of those actions.

    • ✗ The budget allocated to the project

      Budget is an input; Key Results are focused on outputs and outcomes.

30. 30 A Strategic Leader is reviewing the 'Operating Model' design. They decide to move from a 'Functional' structure to a 'Product-Centric' structure. What is the primary governance challenge in this transition?

    Think about the risk of each 'Product Team' becoming a kingdom of its own, ignoring the rest of the company.

    Maintaining cross-product consistency and preventing 'siloed' governance within product teams

    When teams focus purely on their product, they can lose sight of the enterprise's integrated value chain and standards.

    • ✗ The cost of new business cards

      Administrative costs are negligible compared to strategic governance shifts.

    • ✗ Making sure the IT department still reports to the CFO

      Reporting lines are tactical; the strategic challenge is the 'horizontal' alignment across products.

    • ✗ The 'Three Lines of Defence' no longer apply to product teams

      The model applies regardless of structure, though its implementation might change.