Isaca Updated COBIT-2019 Exam Questions and Answers by aj

 The Align, Plan and Organize (APO) domain incorporates managed risk as one of its management objectives. The APO domain covers the activities related to aligning IT strategy with business strategy, planning IT resources and capabilities, organizing IT governance structures and processes, managing IT performance, innovation, risk, quality, human resources, security, information, services, etc. The APO domain consists of 13 management objectives that describe the desired outcomes of these activities.14 References: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance and Management Objectives

 An IT implementation method design factor is a characteristic that influences how an enterprise implements IT solutions and services. DevOps is an IT implementation method that focuses on software building, deployment and operations, by integrating development and operations teams to improve collaboration and productivity1, p. 31. References: 1: COBIT 2019 Framework: Introduction and Methodology

 According to Capability Maturity Model Integration (CMMI), Level 2 within the five maturity levels for processes best describes the outcome of the process achieving its purpose through the application of a basic, yet complete, set of activities that can be characterized as performed. CMMI is a process improvement approach that provides organizations with the essential elements of effective processes. CMMI defines five maturity levels for processes, from 1 (initial) to 5 (optimizing). Level 2 (managed) means that the process is planned and executed in accordance with policy; employs skilled people who have adequate resources to produce controlled outputs; involves relevant stakeholders; is monitored, controlled, and reviewed; and is evaluated for adherence to its process description.12 References: CMMI for Development, Version 1.3, CMMI Institute - Capability Maturity Model Integration

The board of directors is the highest-level governance body in an enterprise that provides strategic direction, oversight, guidance, and approval for information and technology governance. The board of directors is accountable for monitoring the performance of the execution of an EGIT implementation program plan against success metrics and adjusting long-term targets when necessary. This means that the board of directors is responsible for ensuring that the EGIT implementation program plan is aligned with the enterprise’s vision, mission, values, strategy, goals, and objectives, and that it delivers the expected value and benefits to the enterprise and its stakeholders. The board of directors is also responsible for reviewing the progress and outcomes of the EGIT implementation program plan on a regular basis, using predefined success metrics such as key performance indicators (KPIs), key goal indicators (KGIs), key risk indicators (KRIs), etc., to measure the achievement of the program objectives and goals. The board of directors is also responsible for adjusting the long-term targets of the EGIT implementation program plan when necessary, based on the changing business needs, environment, risks, opportunities, etc., and ensuring that the program remains relevant and effective.