Which of the following components should be considered for inclusion when considering the threat landscape design factor?
Answer : D
The component that should be considered for inclusion when considering the threat landscape design factor is information security focus areas. The threat landscape is one of the 11 design factors defined in COBIT 2019, and it refers to the current and emerging threats that may affect the enterprise's information and technology assets, such as cyberattacks, natural disasters, human errors, etc. Information security focus areas are the specific domains or topics that need to be addressed by the governance system to ensure adequate protection of information and technology assets from potential threats, such as identity and access management, data protection, incident response, etc.The answer is based on the COBIT 2019 Design Guide4, page 17.Reference:4: COBIT 2019 Design Guide | Digital | English
Which role is responsible for managing the development, implementation, evaluation and ongoing maintenance of new and existing products and services?
Answer : B
According to the COBIT 2019 Design Guide, a service manager is responsible for managing the development, implementation, evaluation and ongoing maintenance of new and existing products and services. A service manager ensures that the products and services meet the needs and expectations of the customers and stakeholders, and that they are aligned with the enterprise strategy and objectives.A service manager also monitors and reports on the performance and quality of the products and services, and initiates improvement actions when necessary.1, p.64Reference:1: COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution
After IT department goals have been aligned with enterprise goals, the NEXT step is to link the alignment goals with:
Answer : A
After IT department goals have been aligned with enterprise goals, the next step is to link the alignment goals with governance and management objectives. Alignment goals are the intermediate goals that link the enterprise goals with the governance and management objectives. Governance and management objectives are the desired outcomes of the governance system for information and technology. Alignment goals are derived from the enterprise goals, which reflect the stakeholder drivers and needs.Governance and management objectives are derived from the alignment goals, which reflect how information and technology can support the enterprise strategy and objectives.14Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance System
An enterprise is designing a specific governance system that is using diverse technology deployments with multiple domains of business operations. Which of the following is the expected deliverable when tailoring the COBIT 2019 framework?
Answer : A
The focus areas are specific governance topics that are relevant for an enterprise based on its context, needs, and objectives. The focus areas provide guidance on how to apply the COBIT 2019 framework to address specific issues or challenges related to information and technology governance. The focus areas also help to tailor the COBIT 2019 framework to suit the enterprise's specific governance system design. Therefore, when an enterprise is designing a specific governance system that is using diverse technology deployments with multiple domains of business operations, the expected deliverable when tailoring the COBIT 2019 framework is the focus area guidance.The focus area guidance will help the enterprise to select and prioritize the relevant focus areas that match its governance needs and objectives, and to customize the COBIT 2019 components such as principles, enablers, goals, processes, practices, etc., according to the focus area requirements12Reference:1: COBIT 2019 Design Guide, page 51-522: COBIT 2019 Framework: Introduction and Methodology, page 27-28
Within a tailored enterprise governance system, a sourcing model for information and technology is associated with:
Answer : A
A tailored enterprise governance system is a governance system that is customized to suit the specific needs and context of an enterprise. A sourcing model for information and technology is one of the design factors that influence the design and implementation of a tailored governance system. A sourcing model describes how the enterprise obtains and delivers I&T services, such as in-house, outsourced, cloud-based, etc.The sourcing model affects the governance objectives, components, and enablers that are relevant and applicable for the enterprise.12Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution
The COBIT framework is designed to meet the I&T goals for which of the following?
Answer : C
The COBIT framework is designed to meet the I&T goals for the entire enterprise. The COBIT framework is a comprehensive governance and management framework for information and technology that helps enterprises to achieve their goals and create value. The COBIT framework consists of four core publications: COBIT 2019 Framework: Introduction and Methodology; COBIT 2019 Framework: Governance System; COBIT 2019 Framework: Governance and Management Objectives; COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution.The COBIT framework is designed to meet the I&T goals for the entire enterprise by providing a holistic approach that covers all aspects of I&T governance and management, as well as by enabling customization and tailoring to suit different contexts, needs, priorities, etc.14Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance System
Which of the following describes the COBIT performance model?
Answer : B
The COBIT performance model is integrated into the COBIT core model. The COBIT core model consists of two main elements: the governance and management objectives (which define what needs to be achieved) and the performance model (which defines how well it needs to be achieved). The performance model is based on existing maturity and capability models (such as ISO/IEC 15504) and provides a common language to measure and communicate performance.The performance model consists of six levels (from 0 to 5) that describe the increasing degree of capability for each governance or management objective.15Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance System