Isaca Updated COBIT-2019 Exam Questions and Answers by andreas

 The COBIT 2019 publication that includes a workflow for planning a tailored governance system for the enterprise is COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution. This publication provides guidance on how to design a customized governance system for information and technology using COBIT as a reference framework. It includes a workflow for planning a tailored governance system for the enterprise that consists of seven steps: define design factors; define focus areas; define current state; define target state; identify gaps; define roadmap; select implementation method.14 References: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution

 The IT design factor is a design factor that describes how an enterprise uses information and technology to achieve its goals and objectives. There are six IT design factors defined in COBIT 2019: strategic; operational; data-driven; compliance-driven; innovation-driven; customer intimacy-driven. Each design factor has different implications for the governance and management of information and technology in terms of focus areas, processes, practices, roles, structures, and metrics. When considering the role of IT design factor, and the design factor value is strategic, one of the management objectives that should be a priority is managed innovation (APO04), which involves identifying new opportunities for using information and technology to create value for the enterprise. This management objective supports the strategic role of IT in enabling business transformation, differentiation, competitiveness, growth, and sustainability. This management objective also involves establishing an innovation culture and process that encourages creativity, experimentation, collaboration, learning, and improvement5 References: 5: COBIT 2019 Design Guide: page 35-36 : COBIT 2019 Process Reference Guide: page 57-59

The information security function within the IT corporate structure is responsible for classifying information using an agreed-upon classification scheme for a new data collection system. According to the COBIT 2019 Implementation Guide, information security is one of the key enablers of IT governance and management, and it includes the processes and practices for ensuring the confidentiality, integrity, and availability of information assets. One of the activities of information security is to define and implement an information classification scheme that categorizes information based on its sensitivity, criticality, and value to the enterprise. This scheme helps to determine the appropriate level of protection and controls for different types of information, especially for new data collection systems that may involve personal or sensitive data. References: : COBIT 2019 Implementation Guide: Implementing and Optimizing an Information and Technology Governance Solution, page 15 1 : COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 62 .

The management objective BAI11 Managed Projects involves ensuring that IT-enabled change initiatives are delivered on time, within budget, and in accordance with stakeholder expectations. This management objective covers the activities of initiating, planning, executing, monitoring, controlling, and closing IT projects, as well as managing project risks, issues, quality, scope, resources, communications, and stakeholders. This management objective is best for the consultant to recommend for developing a governance and management system that can address the issue of multiple IT-enabled change initiatives frequently being delivered late and failing to meet business needs. By applying this management objective, the enterprise can improve its project governance and management capabilities, ensure alignment of IT projects with business strategy and objectives, enhance project performance and outcomes, and increase stakeholder satisfaction and value realization12 References: 1: COBIT 2019 Process Reference Guide: Governance and Management Objectives, page 77-79 2: COBIT 2019 Implementation Guide: page 49-50