COBIT-2019 Exam Dumps - Isaca Certification Questions and Answers

The best starting point when translating enterprise goals into actionable governance and management objectives is prioritized enterprise goals. The enterprise goals are the high-level statements of what an enterprise wants to achieve in terms of its mission, vision, values, strategy, etc. The enterprise goals are aligned with the stakeholder needs that reflect the expectations and requirements of various internal and external parties that have an interest or stake in the enterprise’s information and technology activities. The prioritized enterprise goals are the subset of enterprise goals that have been ranked according to their importance or urgency for the enterprise based on its context and needs. By starting with prioritized enterprise goals when translating them into actionable governance and management objectives, an enterprise can ensure that it focuses on the most critical aspects of its information and technology governance that support its strategy and objectives. This will also help to align its information and technology activities with its stakeholder needs34 References: 3: COBIT 2019 Framework: Introduction and Methodology: page 25-26 4: COBIT 2019 Design Guide: page 35-36

The governance system design workflow is a workflow that describes how an enterprise can design and implement a governance system using COBIT 2019. The governance system design workflow consists of six steps: determine initial scope; identify relevant design factors; prioritize governance and management objectives; define target capability levels; identify gaps; finalize scope. The governance system design workflow allows for consideration of all design factors in order to develop a customized governance system. The design factors are the characteristics or conditions that influence how an enterprise designs and implements its governance system using COBIT 2019. The design factors include aspects such as enterprise strategy archetype; enterprise goals; IT-related goals; risk profile; IT deployment; threat landscape; compliance requirement; operating environment; size of enterprise; culture; stakeholders; etc. By considering all design factors in the governance system design workflow, an enterprise can ensure that its governance system is appropriate for its context and needs, that it delivers value and benefits to the enterprise and its stakeholders, that it aligns with the relevant standards, guidelines, regulations, best practices, etc., that it meets stakeholder requirements and expectations, etc.References: : COBIT 2019 Design Guide: page 33-48

The process ‘Ensured Stakeholder Engagement’ (EDM04) is one of the governance processes in COBIT 2019 that involves establishing transparent communication with stakeholders about their needs and expectations from information and technology governance. This process also involves ensuring stakeholder involvement in governance decision making and monitoring stakeholder satisfaction with governance outcomes. One of the roles that is best suited for this responsibility is the board and executive management, who are the highest-level governance body and decision makers in an enterprise. The board and executive management have a duty to ensure that they understand the needs and expectations of various stakeholders such as shareholders, regulators, customers, employees, suppliers, etc., and that they communicate effectively with them about the enterprise’s strategy, objectives, performance, risks, issues, opportunities, etc., related to information and technology governance. The board and executive management also have a responsibility to involve stakeholders in governance decision making by soliciting their input, feedback, opinions, suggestions, etc., and by considering their interests and perspectives when making governance choices. The board and executive management also have a role in monitoring stakeholder satisfaction with governance outcomes by measuring stakeholder value realization from information and technology investments and initiatives.References: : COBIT 2019 Process Reference Guide: Governance and Management Objectives, page 25-27 : COBIT 2019 Framework: Governance and Management Objectives, page 19-20

Ensuring the program team knows and understands the enterprise goals is a part of the “Where do we want to be?” phase of the implementation. The implementation of a governance system is divided into seven phases, each with a set of activities and outputs. The “Where do we want to be?” phase involves defining the desired outcomes and target state of the governance system, based on the enterprise’s vision, mission, values, and goals. One of the activities in this phase is to ensure that the program team is aware of and aligned with the enterprise goals, as well as their roles and responsibilities in achieving them. The answer is based on the COBIT 2019 Implementation Guide2, page 34. References: 2: COBIT 2019 Implementation Guide | Digital | English

The Deliver, Service and Support (DSS) domain incorporates managed business process controls as one of its management objectives. The DSS domain covers the activities related to delivering IT services to internal and external customers, supporting IT operations and users, managing service requests, incidents, problems, continuity, security, availability, capacity, etc. The DSS domain consists of 6 management objectives that describe the desired outcomes of these activities.14 References: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance and Management Objectives

 The Align, Plan and Organize (APO) domain incorporates managed risk as one of its management objectives. The APO domain covers the activities related to aligning IT strategy with business strategy, planning IT resources and capabilities, organizing IT governance structures and processes, managing IT performance, innovation, risk, quality, human resources, security, information, services, etc. The APO domain consists of 13 management objectives that describe the desired outcomes of these activities.14 References: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance and Management Objectives

The different levels of involvement associated with roles and organizational structure are primarily divided into responsibility and accountability levels. Responsibility and accountability are two key concepts that define the degree of involvement and authority that a role has in performing a task or process. Responsibility means performing or overseeing a task or process, while accountability means being answerable for the outcome or result of a task or process. COBIT uses a RACI chart to assign different levels of responsibility and accountability to roles and organizational structures for each governance and management objective.13 References: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Roles, Responsibilities & RACI Charts