Isaca Updated COBIT-2019 Exam Questions and Answers by zunaira

 A capability maturity model is a tool that assesses how well a process is implemented and performing at a given level, ranging from 0 (non-existent) to 5 (optimized). Each level defines a set of attributes that describe the characteristics of the process at that level, such as process performance, process documentation, process control, process measurement, etc. The model is based on the COBIT 2019 Process Assessment Model4, page 11. References: 4: COBIT 2019 Process Assessment Model | Digital | English

The alignment goal titled “Security of information, processing infrastructure and privacy” is part of the internal dimension of the IT BSC, as it relates to the protection of IT assets and information from unauthorized access, use, disclosure, modification, or destruction2, p. 20. References: 2: COBIT 2019 Framework: Governance and Management Objectives

 According to the COBIT 2019 Framework: Introduction and Methodology, a maturity level is a performance measure that is used to assess a specific focus area. A focus area is a topic that is relevant for governance and management of enterprise information and technology (I&T), such as cybersecurity, privacy or digital transformation. A maturity level indicates the extent to which a focus area is implemented and integrated in the enterprise’s governance system. There are six maturity levels defined in COBIT 2019, ranging from 0 (incomplete) to 5 (optimized).3, p. 77-78 References: 3: COBIT 2019 Framework: Introduction and Methodology

Providing clear definition of the processes and required activities facilitates the achievement of different capability levels in COBIT core model. Processes are structured sets of activities that produce outputs or outcomes for achieving specific objectives. Activities are specific tasks or actions that contribute to achieving a process outcome or objective. Processes and activities are defined by their inputs, outputs, roles, responsibilities, controls, etc. Providing clear definition of processes and activities helps to ensure that they are performed consistently, effectively, efficiently, and reliably, which leads to higher capability levels.12 References: COBIT2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance and Management Objectives