COBIT5 COBIT 5 Foundation Exam Questions and Answers

Organizational maturity has a relationship to the achievement of the organization's business goals

A maturity assessment is done at an enterprise or organizational level and a capability assessment is done at a process level

A maturity assessment can use the findings of a capability assessment

Maturity and capability assessments are only defined by CMMI (Capability Maturity Model -Integrated), NOT by ISO15504

Tailoring COBIT and other supporting good practices and standards to Tit the unique context of the

enterprise is required

Significant incidents related to IT risk, such as data loss or project failure, have been experienced

A focus on quick wins and prioritizing the most beneficial improvements that are #a»»e*l lo implement is needed

Key program roles and responsibilities should be defined and assigned

To link the management domains of Plan, Build, Run and Monitor

To provide complete enterprise coverage

To connect stakeholder needs with enterprise goals

To integrate Governance with Management

a balance among benefits, risk and resources

the ratio of costs versus achieved service levels

maximized financial benefits to the investment portfolio

Initiatives that are easiest to achieve and will garner business benefits

Initiatives that are the least expensive in order to lower risk due to failure

Initiatives with the lowest cost regardless of expected business value

Cyber Security Framework

Skills Framework for the Information Age

Sans Security Policy Framework

Principles

Intrinsic goals

Enterprise goals

Processes

Operating and using the new approaches

Forming the implementation team

Identifying the role players

Communicating outcome

Specific work products are defined at each capability level, generic work products are defined on an organizational level

Specific work products are associated with the IT-related goals, generic work products are associated with the higher level enterprise goals

Specific work products are defined for each process, generic work products are defined for all generic processes from capability level 2 to 5

Specific work products define the objectives at activity level, generic work products define the level objectives of a process

The proposed detailed solutions and definitions of the initiative

Roles & responsibilities of the enterprise

Further requirements for continual improvement

The expected benefits of operating in the changed way

Manage Continuity

Manage Operations

Manage Risk

Manage Availability and Capacity

Duplication of resources

IT Risk

Trigger event

Pain point

A structure for consistency

Detailed process activities

Access to social media

Confirmation that practices are applied

Treating implementation as a program

Separating business and IT-related activities during implementation

Including improvement initiatives in implementation

Key components should function independently to maintain integrity

The interaction among key components will impede automation and should therefore be limited

The relationships among key components should be identified to maximize consistency

Organizational structures

Behavioral aspects

Service capabilities

IT goals

Resolving inherent priority conflicts

Selecting an implementation method

Determining a sourcing model

Alignment goals

Process activities

Organization structure

An enterprise goal

A strategic goal

An alignment goal

Deliver, Service and Support (DSS)

Align, Plan and Organize (APO)

Build, Acquire and Implement (BAI)

Ensure COBIT guidance is strictly followed without alterations

Customize COBIT guidance to meet specific enterprise needs

Customize COBIT guidance to meet industry best practices