Isaca COBIT 2019 Practice Test - Questions Answers, Page 6

The process activities component of governance and management objectives includes the expected capability level. A process activity is a specific task or action that contributes to achieving a process outcome or objective. A capability level is a measure of how well a process or activity is performed in terms of effectiveness, efficiency, completeness, reliability, etc. A capability level can range from 0 (incomplete) to 5 (optimizing).Each governance and management objective in COBIT defines a set of process activities that are required to achieve it, as well as an expected capability level for each activity.12Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance and Management Objectives

Providing clear definition of the processes and required activities facilitates the achievement of different capability levels in COBIT core model. Processes are structured sets of activities that produce outputs or outcomes for achieving specific objectives. Activities are specific tasks or actions that contribute to achieving a process outcome or objective. Processes and activities are defined by their inputs, outputs, roles, responsibilities, controls, etc.Providing clear definition of processes and activities helps to ensure that they are performed consistently, effectively, efficiently, and reliably, which leads to higher capability levels.12Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance and Management Objectives

According to Capability Maturity Model Integration (CMMI), Level 2 within the five maturity levels for processes best describes the outcome of the process achieving its purpose through the application of a basic, yet complete, set of activities that can be characterized as performed. CMMI is a process improvement approach that provides organizations with the essential elements of effective processes. CMMI defines five maturity levels for processes, from 1 (initial) to 5 (optimizing).Level 2 (managed) means that the process is planned and executed in accordance with policy; employs skilled people who have adequate resources to produce controlled outputs; involves relevant stakeholders; is monitored, controlled, and reviewed; and is evaluated for adherence to its process description.12Reference:CMMI for Development, Version 1.3,CMMI Institute - Capability Maturity Model Integration

The different levels of involvement associated with roles and organizational structure are primarily divided into responsibility and accountability levels. Responsibility and accountability are two key concepts that define the degree of involvement and authority that a role has in performing a task or process. Responsibility means performing or overseeing a task or process, while accountability means being answerable for the outcome or result of a task or process.COBIT uses a RACI chart to assign different levels of responsibility and accountability to roles and organizational structures for each governance and management objective.13Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Roles, Responsibilities & RACI Charts

The enterprise roles and organizational structures component is important to update in a COBIT RACI chart to align with the enterprise's context, priorities and preferred terminology. A RACI chart is a tool that assigns different levels of responsibility, accountability, consultation, and information to roles and organizational structures for each governance and management objective. A RACI chart consists of four components: enterprise roles and organizational structures, governance and management objectives, enterprise process practices and activities, and RACI assignments.The enterprise roles and organizational structures component should be updated to reflect the specific roles and structures that exist in the enterprise, as well as their names and descriptions.13Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Roles, Responsibilities & RACI Charts

The accountable (A) role drives a given task or process within an organizational structure chart (RACI chart). A RACI chart is a tool that assigns different levels of responsibility, accountability, consultation, and information to roles and organizational structures for each governance and management objective. The accountable (A) role means being answerable for the outcome or result of a task or process. There should be only one accountable role for each task or process, as having more than one can lead to confusion or conflict.The accountable role drives a given task or process by ensuring that it is performed effectively and efficiently, by providing direction and guidance, by resolving issues or conflicts, by approving changes or exceptions, etc.13Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Roles, Responsibilities & RACI Charts

The process practices that include inputs and outputs comprise the information flow component of a governance system. A governance system is a set of components that provide direction, oversight, evaluation, monitoring, assurance, etc., for an enterprise's information and technology. A governance system consists of seven components: governance components (such as structures, processes, principles, policies, etc.), governance enablers (such as people, skills, culture, information, services, etc.), governance outcomes (such as value creation, risk optimization, resource optimization, etc.), information flow (the exchange of information among components), culture (the shared values, beliefs, norms, and attitudes), ethical behavior (the conduct that conforms to moral principles), stakeholder needs (the requirements or expectations of internal or external stakeholders).The information flow component comprises the process practices that include inputs and outputs that enable the exchange of information among components.14Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance System

The information flow and items component of COBIT includes a list of artifacts with links to relevant governance and management practices. An artifact is a tangible or intangible object that is produced, modified, or used by a process or activity. An artifact can be a document, a report, a record, a plan, a policy, a procedure, a service, a product, etc.The information flow and items component of COBIT provides a comprehensive list of artifacts that are relevant for each governance and management objective, as well as links to the practices that produce, modify, or use them.12Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance System

The people, skills and competencies component of governance identifies the human resource needs that must be met to achieve governance and management objectives. People are the individuals or groups who perform or are accountable for the governance activities and tasks. Skills and competencies are the abilities and knowledge that people need to perform their roles and responsibilities.The people, skills and competencies component of governance defines the required roles and organizational structures for each governance and management objective, as well as the skills and competencies that are needed for each role.13Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Roles, Responsibilities & RACI Charts