M5 - COBIT Flashcards
What are the six governance system principles under COBIT 2019?
Very Healthy Dieters Do Try Everything
Provide Stakeholder Value
Holistic Approach
Dynamic Governance System
Governance Distinct From Management
Tailored to Enterprise Needs
End-to-End Governance System
Describe the three principles used to develop the COBIT 2019 core model.
CFA (Cashmere Feels Awesome)
Based on Conceptual Model: Governance frameworks should identify key components as well as the relationships between those components.
Open and Flexible: Frameworks should have the ability to change, adding relevant content and removing irrelevant content, while keeping consistency and integrity.
Aligned to Major Standards: Frameworks should align with regulations, frameworks, and standards.
What five components were used for the development of COBIT 2019’s foundation?
COBIT 5
Six principles for a governance system
Three principles for a governance framework
Other standards and regulations
Community contribution
What are the seven components to satisfy management and governance objectives under the COBIT 2019 core model?
Processes
Organizational Structures
Principles, Policies, Frameworks
Information
Culture, Ethics, and Behavior
People, Skills, and Competencies
Services, Infrastructure, and Applications
List the governance objectives and management objectives according to the COBIT 2019 core model.
Governance Objectives:
Evaluate, Direct, and Monitor (EDM)
Management Objectives:
Align, Plan, and Organize (APO)
Build, Acquire, and Implement (BAI)
Deliver, Service, and Support (DSS)
Monitor, Evaluate, and Assess (MEA)
Describe the purpose of ISACA’s COBIT framework.
The COBIT framework provides a roadmap that organizations can use to implement best practices for IT governance and management.
List the objectives included in the Evaluate, Direct and Monitor (EDM) domain
Ensured governance framework setting and maintenance
Ensured benefits delivery
Ensured risk optimization
Ensured resource optimization
Ensured stakeholder engagement
List the objectives included in the Build, Acquire and Implement (BAI) domain
Managed programs
Managed projects
Managed requirements definition
Managed IT changes
Managed assets
Managed knowledge
Managed organizational change
Managed availability and capacity
List the objectives included in the Align, Plan, and Organize (APO) domain
Managed strategy
Managed innovation
Managed portfolio
Managed risk
Managed data
Managed security
Managed HR
Managed budget and costs
List the objectives included in the Design, Service and Support (DSS) domain
Managed operations
Service requests and incidents
Managed problems
Managed continuity
Managed security services
Managed business process controls