Isaca Updated COBIT-Design-and-Implementation Exam Questions and Answers by veronica

COBIT 2019 Design Guide clearly states:

"The threat landscape is influenced by various external and internal factors, including geopolitical instability, industry-specific threats, and regulatory environments."

Geopolitical issues can elevate the threat landscape to a high level, makingDthe correct answer.

COBIT® 2019 explicitly maps IT risk categories to governance and management objectives to demonstrate which objectives mitigate or control specific risk scenarios. This mapping does not redefine objectives as risks, nor does it assign risk appetite or tolerance values. Instead, it shows the degree of control coverage each objective provides for identified IT risk categories.

The Governance and Management Objectives publication clarifies that objectives function as controls or mitigations that reduce either the likelihood or impact of risk events. This relationship supports risk-informed governance design by enabling enterprises to select and prioritize objectives based on their risk exposure.

Risk appetite and tolerance are enterprise-level decisions established by governance bodies, not attributes of individual objectives. Likewise, objectives are not risk scenarios themselves. Therefore, the mapping’s purpose is to illustrate control relevance, helping enterprises design governance systems that effectively address their risk profile.

“Challenge: Lack of required skills and competencies…” → “Root causes: … Business and management skills often not included in training …”

Conducting a gap analysis will best enable management to identify all additional resources required to implement planned I&T changes. A gap analysis helps to identify the differences between the current state and the desired future state, highlighting the necessary resources and actions needed to bridge the gaps.

A gap analysis involves assessing the current capabilities, processes, and resources and comparing them to the requirements needed to achieve the desired state. This process identifies specific gaps in resources, skills, and processes that need to be addressed to implement planned changes successfully.

COBIT 2019 Framework References:

COBIT 2019 Implementation Guide, Chapter 5:Discusses the use of gap analysis to identify the necessary resources and actions required for successful implementation.

COBIT 2019 Design Guide, Chapter 2:Highlights the importance of understanding current capabilities and identifying gaps to inform the planning and resourcing of I&T changes.

By conducting a gap analysis, management can systematically identify and address resource needs, ensuring a comprehensive approach to implementing planned changes.