Isaca COBIT 2019 Practice Test - Questions Answers

The Skills Framework for the Information Age (SFIA) has been used as a basis for developing guidance for the COBIT governance component of people, skills and competencies.SFIA is a globally recognized framework that describes the skills required by professionals who work with information and technology2, p.36.Reference:2: COBIT 2019 Framework: Introduction and Methodology

Within the COBIT organizational structures component, the Accountable (A) role is solely liable for the success and achievement of assigned tasks.This role has the authority to approve or veto any decision or activity related to the tasks, and is responsible for ensuring that the Responsible role has adequate resources and skills to perform the tasks2, p.34.Reference:2: COBIT 2019 Framework: Introduction and Methodology

According to the COBIT 2019 Design Guide, a service manager is responsible for managing the development, implementation, evaluation and ongoing maintenance of new and existing products and services. A service manager ensures that the products and services meet the needs and expectations of the customers and stakeholders, and that they are aligned with the enterprise strategy and objectives.A service manager also monitors and reports on the performance and quality of the products and services, and initiates improvement actions when necessary.1, p.64Reference:1: COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution

The board is responsible for the oversight of structures and mechanisms that drive enterprise governance of information and technology (EGIT). According to the ISACA Journal article, ''the board is ultimately accountable for EGIT and should oversee its establishment and monitor its effectiveness'' . The board should also ensure that EGIT aligns with the enterprise governance framework and supports the achievement of enterprise objectives.

COBIT defines stakeholder value creation as the realization of benefits at an optimal resource cost while optimizing risk. This is based on the principle of balance, which states that ''governance of enterprise I&T should ensure that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved; setting direction through prioritization and decision making; and monitoring performance and compliance against agreed-on direction and objectives'' . Value creation is not only about reducing costs or mitigating risks, but also about optimizing them in relation to the expected benefits.

The value that I&T delivers should be aligned directly with the values on which the business is focused. This is based on the principle of alignment, which states that ''governance of enterprise I&T should ensure that I&T-enabled investments are aligned with the enterprise strategy and deliver the expected benefits'' . Value delivery is not only about maintaining or increasing value from existing I&T investments, but also about ensuring that new investments support the strategic objectives and stakeholder needs of the enterprise.

COBIT addresses governance issues by grouping relevant governance components into objectives that can be managed to a required capability level. This is based on the principle of performance, which states that ''governance of enterprise I&T should ensure that I&T performance is measured using relevant metrics; transparently communicated to stakeholders; evaluated against targets; and leads to appropriate management actions'' . COBIT does not provide a full description of the entire IT environment or define specific governance strategies and processes, but rather provides a generic and flexible framework that can be adapted to different contexts and situations.

A guiding principle in the development of COBIT is that COBIT aligns with other related and relevant I&T standards, frameworks and regulations. This is based on the principle of integration, which states that ''governance of enterprise I&T should ensure integration into enterprise governance; alignment with other related standards, frameworks and regulations; and provision of a common language for all stakeholders'' . COBIT does not include or replace other standards, frameworks or regulations, but rather complements them by providing a holistic and comprehensive approach to governance of enterprise I&T.

An element of governance is evaluating stakeholder needs to determine enterprise objectives.This is based on the principle of stakeholder value, which states that ''governance of enterprise I&T should ensure that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved; setting direction through prioritization and decision making; and monitoring performance and compliance against agreed-on direction and objectives''1.Evaluating stakeholder needs involves identifying who the stakeholders are, what their interests and expectations are, and how they can influence or be influenced by the enterprise's activities2.Reference:1: COBIT 2019 Framework: Introduction and Methodology, page 232: COBIT 2019 Framework: Governance and Management Objectives, page 18