When reviewing the risk profile of an enterprise during the governance design phase, what MUST be established prior to conducting a high-level risk analysis?
Correct : C
Before conducting a high-level risk analysis during the governance design phase, it is necessary to establish the Enterprise's risk appetite (Option C). The enterprise's risk appetite is a statement of the level of risk that an organization is willing to accept in pursuit of its objectives. This information helps in setting the scope and objectives of the risk analysis, as well as guiding decisions on which risks to prioritize and manage. Understanding the enterprise's risk appetite is crucial in order to effectively assess and manage risks, and to align the governance framework with the enterprise's risk management goals and objectives.
According to the ISACA COBIT 2019 official Manual, it is important to establish the enterprise's risk appetite prior to conducting a high-level risk analysis to ensure that the risk profile and risk assessment results are evaluated within the context of the organization's risk appetite and comfort zone. The risk appetite should be documented and approved by the board of directors or the governing body and should be used to determine the acceptable level of risk the organization is willing to bear.
Start a Discussions
A privately held company is planning to be listed on the stock exchange and is working on meeting regulatory requirements. After considering an assessment by external consultants, the company has decided to implement the process 'Ensured Stakeholder Engagement." Who is BEST suited for this responsibility?
Correct : C
According to the ISACA COBIT 2019 official Manual, the board and executive management should be responsible for ensuring stakeholder engagement when a company is planning to be listed on the stock exchange and is working on meeting regulatory requirements. This is because they are the ones who need to ensure the company is meeting the necessary standards set by the regulatory body and engaging with stakeholders to ensure the company is being transparent and open about its plans. The board and executive management should ensure that all relevant stakeholders are consulted and that their views are taken into account when making decisions about listing the company on the stock exchange.
Start a Discussions
What is the role of the internal audit function when defining the EGIT target state?
Correct : A
According to the ISACA COBIT 2019 official Manual, the internal audit function must provide advice and assistance with target-state positioning and gap priorities when defining the EGIT target state. The internal audit function must provide objective, independent and unbiased advice on the positioning of the target state, as well as on the prioritization of gaps to be addressed. This advice must be based on the internal audit function's knowledge of the enterprise's strategic objectives, as well as its understanding of the processes, risks and control environment.
Start a Discussions
Which of the following l&T implementation methods requites the HIGHEST level of participation by users at multiple stages of software development?
Correct : D
According to the ISACA COBIT 2019 official Manual, Agile is the l&T implementation method that requires the highest level of user participation at multiple stages of software development. This is because Agile focuses on user collaboration and feedback, and encourages rapid changes through iterative cycles. Agile also requires the users to be involved in the entire development process, from design to implementation, as well as testing and deployment. This level of user participation ensures that the software being developed is tailored to the user's needs and that any issues or problems can be identified and rectified quickly.
Start a Discussions
Which of the following is the PRIMARY benefit or output derived from setting targeted capability levels and performing a capability-level gap analysis for selected processes?
Correct : B
The primary benefit or output derived from setting targeted capability levels and performing a capability-level gap analysis for selected processes is the identification of process improvement opportunities, according to the official COBIT 2019 Study Manual from ISACA. This gap analysis can help to identify areas where processes are not meeting their desired capability levels and can provide insight into how processes can be improved to meet their desired levels. This can help to increase efficiency and reduce costs.
Start a Discussions