Flashcards

Governance and Management Objectives

The five domains containing 40 governance and management objectives that form the core model of COBIT 2019.

5 minutes 5 Questions

COBIT 2019 Foundation distinguishes between Governance and Management Objectives as two complementary dimensions of enterprise governance of IT. Governance Objectives focus on directing and overseeing IT activities to ensure alignment with organizational goals and stakeholder value creation. These …

Concepts covered

Evaluate, Direct and Monitor (EDM) Domain EDM01: Ensured Governance Framework Setting and Maintenance EDM02: Ensured Benefits Delivery EDM04: Ensured Resource Optimization Align, Plan and Organize (APO) Domain BAI Key Objectives: Programs, Requirements, and Solutions Deliver, Service and Support (DSS) Domain Monitor, Evaluate and Assess (MEA) Domain MEA Key Objectives: Performance, Controls, and Compliance The COBIT Core Model: 40 Objectives Overview Objective Structure: Purpose, Practices, and Activities EDM03: Ensured Risk Optimization EDM05: Ensured Stakeholder Engagement APO Key Objectives: Strategy, Architecture, and Innovation APO Key Objectives: Portfolio, Budget, and HR APO Key Objectives: Relationships, Agreements, and Suppliers APO Key Objectives: Quality, Risk, Security, and Data Build, Acquire and Implement (BAI) Domain BAI Key Objectives: Change and Configuration Management DSS Key Objectives: Operations, Service, and Continuity

Test mode:

Exam (Timed)

Practice (With explanations)

Start practice test

COBIT Foundation - Governance and Management Objectives Example Questions

Test your knowledge of Governance and Management Objectives

Question 1

A company's board is reviewing its risk management approach. The CRO presents evidence that the current risk tolerance levels were set three years ago, the competitive landscape has shifted significantly, and several new regulatory requirements have emerged. The CISO argues the existing thresholds are still effective because no major incidents occurred. Using EDM03 principles, which recommendation is most appropriate for the board?

Delegate the risk tolerance review to operational management so they can align thresholds with day-to-day risk decisions Maintain current risk tolerance levels since the absence of major incidents demonstrates their ongoing effectiveness and adequacy Re-evaluate and update risk appetite and tolerance levels to reflect the changed business environment and regulatory landscape

Correct Answer: Re-evaluate and update risk appetite and tolerance levels to reflect the changed business environment and regulatory landscape

EDM03 (Ensured Risk Optimisation) requires the board to continuously evaluate and direct risk management practices, including periodically reassessing risk appetite and tolerance levels to ensure they remain aligned with the evolving business environment, regulatory requirements, and strategic objectives.

Maintaining current thresholds based solely on the absence of incidents is a survivorship bias fallacy and ignores that unchanged tolerances may no longer reflect actual exposure in a changed landscape. Delegating risk tolerance decisions to operational management violates EDM03's principle that setting risk appetite is a governance-level responsibility reserved for the board.

Key concept tested: board-level responsibility for continuously aligning risk appetite with changing enterprise context under EDM03.

Question 2

In the COBIT 2019 Core Model, what is the sequential relationship among the four management domains relative to the IT lifecycle?

They operate as parallel domains where each addresses a separate governance function across the enterprise simultaneously They follow a logical progression from monitoring performance, through delivering services, building solutions, to aligning strategy They follow a logical progression from aligning strategy, through building solutions, delivering services, to monitoring performance

Correct Answer: They follow a logical progression from aligning strategy, through building solutions, delivering services, to monitoring performance

The four management domains in the COBIT 2019 Core Model follow a natural IT lifecycle sequence: Align, Plan and Organize (APO) establishes strategy and direction, Build, Acquire and Implement (BAI) develops and acquires solutions, Deliver, Service and Support (DSS) ensures operational delivery, and Monitor, Evaluate and Assess (MEA) tracks performance and compliance.

The reversed sequence is incorrect because monitoring is the final stage, not the starting point of the IT lifecycle. The parallel operation answer is wrong because the domains are specifically designed to follow a sequential lifecycle progression, not function as simultaneous governance layers.

Key concept tested: sequential ordering of the four COBIT management domains within the IT lifecycle.

Question 3

Which of the following are the three key practices within EDM03: Ensured Risk Optimization in COBIT 2019?

Define risk thresholds, implement risk controls, and review risk outcomes Identify risk appetite, assess risk responses, and communicate risk levels Evaluate risk management, direct risk management, and monitor risk management

Correct Answer: Evaluate risk management, direct risk management, and monitor risk management

The correct answer reflects the standard EDM (Evaluate, Direct, Monitor) structure that applies to all governance objectives in COBIT 2019, where EDM03 specifically addresses risk optimization through three practices: Evaluate Risk Management, Direct Risk Management, and Monitor Risk Management.

Identifying risk appetite, assessing risk responses, and communicating risk levels describes risk management activities but does not follow the EDM governance practice structure. Defining risk thresholds, implementing risk controls, and reviewing risk outcomes similarly lists operational risk activities rather than the standardized governance practice naming convention used across all EDM domain objectives.

The key concept tested is understanding the consistent Evaluate, Direct, and Monitor practice structure applied across COBIT 2019 governance domain objectives.

Master IT Governance with COBIT

COBIT 2019 governance system & framework practice

Governance Framework: COBIT principles, governance and management objectives
Performance Management: Goals cascade, metrics, and maturity model
Design Factors: Enterprise strategy, risk profile, IT landscape, and compliance
30-Day Money-Back Guarantee: Full refund within 30 days if unsatisfied
Risk-Free: 7-day free trial with all premium features!

More Governance and Management Objectives questions

737 questions (total)

Practice 100 questions

One session at a time, always new questions