Isaca Updated COBIT-Design-and-Implementation Exam Questions and Answers by lorcan

COBIT® 2019 explicitly recognizes IT implementation methods as a design factor that influences governance system design. Among the listed methods, DevOps is described as having the broadest scope, integrating software development, deployment, operations, and continuous improvement into a single lifecycle.

Agile focuses primarily on iterative development and responsiveness to change, but does not inherently include operational responsibility. Traditional methods emphasize sequential development and handover to operations, creating clear silos. Hybrid approaches combine elements but still lack full lifecycle integration.

The Design Guide emphasizes that when DevOps is selected as a design factor value, governance must address end-to-end accountability, automation, continuous delivery, and operational resilience. This directly affects governance objectives such as solution build, transition, and operations. DevOps therefore represents the most comprehensive scope, covering build, deploy, run, and improve activities in a unified model.

The stakeholders responsible for creating or updating EGIT objectives following the completion of the first iteration of an EGIT program implementation life cycle are the CIO and business executives. They have the strategic oversight and authority to set and adjust objectives based on the initial outcomes and evolving business needs.

The CIO and business executives play a critical role in ensuring that the EGIT (Enterprise Governance of Information and Technology) objectives are aligned with business strategy and goals. After the first iteration, their involvement is crucial to review progress, adjust objectives, and ensure continued alignment with enterprise priorities.

COBIT 2019 Framework References:

COBIT 2019 Implementation Guide, Chapter 7:Highlights the roles of senior management, including the CIO and business executives, in setting and updating EGIT objectives.

COBIT 2019 Design Guide, Chapter 4:Emphasizes the importance of executive involvement in governance system design and iterative improvement.

By engaging the CIO and business executives in this process, the enterprise ensures that EGIT objectives remain relevant and aligned with overall business strategy.

COBIT 2019 emphasizes:

"Defining enterprise goals is foundational to designing a governance system, as these goals drive the selection and prioritization of governance and management objectives."

Without clearly defined enterprise goals, planning cannot proceed effectively.

According to COBIT 2019 and general IT risk management principles:

"Risk mitigation is the most commonly used response strategy. It involves taking action to reduce the likelihood or impact of a risk, often by implementing controls or other countermeasures."

This is supported in COBIT’s treatment of risk under governance objective EDM03.