Governance System Principles

Question 1

List the 6 principles for a governance system (“very healthy dietors do tyry everything”)

Answer 1

value
holistic
dynamic
distinct
tailored
end-to-end

Question 2

create value for the company’s stakeholders by balancing benefits, risks, & resources

Answer 2

value

Question 3

comprises diverse components where governance & management are not treated as isolated elements

Answer 3

holistic

Question 4

when a change in one governance system occurs, the impact on all others should be considered so that the system continues to meet the demands of the organization

Answer 4

dynamic

Question 5

management activities & governance systems should be clearly distinguished from each other

Answer 5

distinct

Question 6

governance systems should be customized to each company, using design factors to prioritize & tailor the system

Answer 6

tailored

Question 8

3 principles used to develop the COBIT 2019 core model

Answer 8

based on conceptual model
open & flexible
aligned to major standards

Question 9

1 domain of governance objectives

Answer 9

evaluate, direct, & monitor (EDM)

Question 10

those charged with governance evaluate strategic objectives, direct management to achieve those objectives, & monitor whether objectives are being met

Answer 10

evaluate, direct, & monitor (EDM)

Question 11

ensuring benefits delivery
governance framework setting
risk optimization
resource optimization
stakeholder engagement

Answer 11

evaluate, direct, & monitor (EDM)

Question 12

4 domains of management objectives

Answer 12

align, plan, & organize (APO)
build, acquire, & implement (BAI)
deliver, service, support (DSS)
monitor, evaluate, & assess (MEA)

Question 13

(domain) focuses on IT’s overall strategy, organization, & supporting activities

Answer 13

align, plan, & organize (APO)

Question 14

(domain) managed data
IT infrastructure & architecture
innovation
budgeting
human resources
vendors
quality
security
managing risk

Answer 14

align, plan, organize (APO)

Question 15

(domain) addresses the security, delivery, & support of IT services

Answer 15

deliver, service, & support (DSS)

Question 16

(domain) managed operations
service requests
managed problems
continuity
security services
business process controls

Answer 16

deliver, services, & support (DSS)

Question 17

(domain) addresses IT’s conformance to the company’s performance targets & control objectives along with external requirements

Answer 17

monitor, evaluate, & assess (MEA)

Question 18

(domain) managed performance & conformance monitoring
managed system of interla control
compliance with external requirements
managed assurance

Answer 18

monitor, evaluate, & assess (MEA)

Question 19

7 components of the governance system

Answer 19

process
organizational strucutures
principles, policies, & frameworks
information
Culture, ethics & competencies
services, infrastructure, & applications

Question 20

(component) set of activities or practices that produce outputs that help achieve overall IT goals

Answer 20

processes

Question 21

(component) the decision-making entities within an organization

Answer 21

organizational strucutures

Question 23

(component) info needed for the governance system to function properly

Answer 23

information

Question 24

(component) influence the success of all management & governance activities

Answer 24

culture, ethics, & behavior

Question 25

(component) needed so that sound decisions are made, corrective actions are taken when necessary, & critical objectives are completed

Answer 25

people, skills, & competencies

Question 26

(component) tools required so that a well-designed governance system is in place for IT processing

Answer 26

services, infrastructure, & applications

Question 27

(design factor) IT governance strategies generally include a primary secondary strategy

Answer 27

enterprise strategy

Question 28

(design factor) goals support the strategy & are structured based on the balanced scorecard dimensions (financial, customer, internal, & growth)

Answer 28

enterprise goals

Question 29

(design factor) addresses current risk exposure for the current organization & maps out which risks exceed the organization's risk appetite

Answer 29

risk profile

Question 30

(design factor) common issues include regular IT audit findings of poor IT quality or control, insufficient resources, frustration between departments, hidden IT spending, problems with data quality, & noncompliance with applicable regulations

Answer 30

information & technology issues

Question 31

(design factor) environment in which the company operates (normal or high)

Answer 31

threat landscape