Pass the Isaca Isaca Certification COBIT-2019 Questions and answers with CertsForce

 The objectives of the Evaluate, Direct and Monitor (EDM) domain are best described by assessing strategic options and guiding senior management on the options chosen. This domain covers the governance activities related to setting direction, monitoring performance, ensuring compliance, and providing feedback to stakeholders. The domain consists of five governance objectives: EDM01 Ensure Governance Framework Setting and Maintenance, EDM02 Ensure Benefits Delivery, EDM03 Ensure Risk Optimization, EDM04 Ensure Resource Optimization, and EDM05 Ensure Stakeholder Transparency.  The domain is based on the COBIT 2019 Framework 2 , page 30.  References:   2 : COBIT 2019 Framework | Digital | English

 An element of governance is evaluating stakeholder needs to determine enterprise objectives.  This is based on the principle of stakeholder value, which states that “governance of enterprise I & T should ensure that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved; setting direction through prioritization and decision making; and monitoring performance and compliance against agreed-on direction and objectives”  1 .  Evaluating stakeholder needs involves identifying who the stakeholders are, what their interests and expectations are, and how they can influence or be influenced by the enterprise’s activities 2 .  References:   1 : COBIT 2019 Framework: Introduction and Methodology, page 23  2 : COBIT 2019 Framework: Governance and Management Objectives, page 18

The enterprise’s risk profile is the most important enterprise risk management concept to fully understand prior to finalizing the design of an IT governance system. Enterprise risk management is the process of identifying, analyzing, evaluating, treating, monitoring, and communicating risks that affect the achievement of enterprise objectives. Enterprise risk management concepts include risk appetite (the amount and type of risk that an enterprise is willing to accept), risk tolerance (the acceptable variation in outcomes related to specific performance measures), risk profile (the overall exposure or level of risk that an enterprise faces), etc.  The enterprise’s risk profile is the most important concept to fully understand prior to finalizing the design of an IT governance system because it helps to determine the appropriate level of risk optimization for each governance objective. 1 4   References:   COBIT 2019 Framework: Introduction and Methodology ,  COBIT 2019 Framework: Governance System

The management objective that would be given higher priority in an enterprise’s governance system when the enterprise is very risk-averse is managed portfolio. This objective relates to ensuring that IT-enabled investments are aligned with the enterprise’s risk appetite and tolerance levels, and that they deliver optimal value and benefits. This objective also involves managing the portfolio of IT-enabled investments throughout their life cycle, from initiation to retirement.  The objective is based on the COBIT 2019 Design Guide 3 , page 71.  References:   3 : COBIT 2019 Design Guide | Digital | English

 According to the COBIT 2019 Framework: Introduction and Methodology, a maturity level is a performance measure that is used to assess a specific focus area. A focus area is a topic that is relevant for governance and management of enterprise information and technology (I & T), such as cybersecurity, privacy or digital transformation. A maturity level indicates the extent to which a focus area is implemented and integrated in the enterprise’s governance system.  There are six maturity levels defined in COBIT 2019, ranging from 0 (incomplete) to 5 (optimized). 3 , p.  77-78  References:   3 : COBIT 2019 Framework: Introduction and Methodology

The process ‘Ensured Stakeholder Engagement’ (EDM04) is one of the governance processes in COBIT 2019 that involves establishing transparent communication with stakeholders about their needs and expectations from information and technology governance. This process also involves ensuring stakeholder involvement in governance decision making and monitoring stakeholder satisfaction with governance outcomes. One of the roles that is best suited for this responsibility is the board and executive management, who are the highest-level governance body and decision makers in an enterprise. The board and executive management have a duty to ensure that they understand the needs and expectations of various stakeholders such as shareholders, regulators, customers, employees, suppliers, etc., and that they communicate effectively with them about the enterprise’s strategy, objectives, performance, risks, issues, opportunities, etc., related to information and technology governance. The board and executive management also have a responsibility to involve stakeholders in governance decision making by soliciting their input, feedback, opinions, suggestions, etc., and by considering their interests and perspectives when making governance choices. The board and executive management also have a role in monitoring stakeholder satisfaction with governance outcomes by measuring stakeholder value realization from information and technology investments and initiatives.

In the COBIT framework, adapting components with related documentation, including inputs and outputs, is primarily associated with " Process activities. " Each governance and management objective within COBIT is supported by detailed processes that encompass specific activities. These activities are meticulously documented, outlining the necessary inputs required to execute them and the expected outputs resulting from their execution.

Process Activities: These are detailed tasks or actions within a process designed to achieve a specific purpose. For each activity, COBIT provides comprehensive documentation that includes:

Inputs: Resources, information, or prerequisites needed to perform the activity.

Outputs: The results, deliverables, or outcomes produced by the activity.

This structured documentation ensures that enterprises can effectively implement and tailor COBIT processes to align with their unique requirements. By referring to process activities, organizations gain access to the necessary guidance on what is needed to perform each task and what should be achieved upon its completion.

Option A, " Process practices, " refers to broader guidelines or best practices for processes but does not provide the granular level of detail concerning specific inputs and outputs.

Option B, " Goals and metrics, " pertains to the objectives and performance indicators used to measure success and effectiveness, rather than the detailed documentation of process execution.

Therefore, for enterprises aiming to adapt COBIT components with detailed documentation on inputs and outputs, " Process activities " serve as the most pertinent reference.

The EGIT implementation life cycle consists of four stages: initiating an EGIT program, defining the EGIT implementation road map, developing the EGIT implementation program plan, and executing the EGIT implementation program plan. The third stage, developing the EGIT implementation program plan, involves identifying and defining the success metrics for the EGIT continual improvement program. These metrics should be aligned with the enterprise goals and objectives, and should measure the performance and outcomes of the EGIT processes and practices.  The success metrics should also be SMART (specific, measurable, achievable, relevant, and time-bound), and should be communicated to all stakeholders involved in the EGIT program.  References:  : COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 26  1  : COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 41 

The principles, policies and frameworks component of a governance system translates desired behavior into practical guidance. Principles are the fundamental norms or rules that guide decision-making and actions. Policies are the statements of intent or direction that define what is expected or required. Frameworks are the conceptual models or structures that define the key elements, relationships, and principles of a system.  The principles, policies and frameworks component of a governance system translates desired behavior into practical guidance by providing a consistent and coherent basis for information and technology governance and management. 1 4   References:   COBIT 2019 Framework: Introduction and Methodology ,  COBIT 2019 Framework: Governance System