ExamGecko
Search Search Login
Home Home / Isaca / NIST-COBIT-2019
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following is CRITICAL for the success of CSF Step 6: Determine, Analyze and Prioritize Gaps?
Which of the following is MOST likely to cause an organization's NIST Cybersecurity Framework (CSF) implementation to fail?
Which of the following represents a best practice for completing CSF Step 3: Create a Current Profile?
Which of the following should be a PRIMARY consideration when creating an action plan to address gaps identified in CSF Step 6: Determine, Analyze, and Prioritize Gaps?
An organization is concerned that there will be resistance in attempts to close gaps between the current and target profiles. Which of the following is the BEST approach to gain support for the process?
Which of the following is the MOST beneficial result of an effective CSF implementation plan?
Which of the following is an important consideration when defining the roadmap in COBIT Implementation Phase 3 - Where Do We Want to Be?
The activity of determining an appropriate target capability level for each process occurs within which implementation phase?
Which of the following COBIT and NIST implementation steps may be reversed depending on the culture of the organization?
The PRIMARY function of COBIT Implementation Phase 7: How Do We Keep the Momentum Going is to provide an opportunity for which of the following?

Question 8 - NIST-COBIT-2019 discussion

Report
Export

Which of the following COBIT 2019 governance principles corresponds to the CSF application stating that CSF profiles support flexibility in content and structure?

A.

A governance system should be customized to the enterprise needs, using a set of design factors as parameters.

Answers
A.

A governance system should be customized to the enterprise needs, using a set of design factors as parameters.

B.

A governance system should focus primarily on the enterprise's IT function and information processing.

Answers
B.

A governance system should focus primarily on the enterprise's IT function and information processing.

C.

A governance system should clearly distinguish between governance and management activities and structures.

Answers
C.

A governance system should clearly distinguish between governance and management activities and structures.

Suggested answer: A

Explanation:

This principle corresponds to the CSF application stating that CSF profiles support flexibility in content and structure, because both emphasize the need for tailoring the governance system to the specific context and requirements of the enterprise12. The CSF profiles are based on the enterprise's business drivers, risk appetite, and current and target cybersecurity posture3. The COBIT 2019 design factors are a set of parameters that influence the design and operation of the governance system, such as enterprise strategy, size, culture, and regulatory environment4.

Show Answer
asked 18/11/2024
Franco Santos
38 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms