Which of the following is a CRITICAL requirement when the IT function is strategic and crucial to the success of the business?

A. Highly capable security-related processes and ensured risk optimization
B. High involvement of IT-related roles in organizational structures
C. Documented IT policies and procedures

The design factor associated with a highly regulated enterprise is likely to attribute MORE importance to which of the following?

A. Documented work products and policies
B. Understanding of the business by IT professionals
C. Managed strategy and operations

Which of the following aspects of organizational structure is MOST critical to ensure effective performance?

A. Escalation procedures and defined and applied
B. A clearly understood and well-documented mandate is in place
C. Required resources are made available, allocated and used

Which of the following performance measures is used to assess a specific focus area?

A. Maturity level
B. Key goal indicator
C. Process capability rating

Which of the following is the MOST essential attribute of the highest process capability level (Level 5)?

A. Full achievement of the process’s purpose
B. Quantitative performance measures
C. Pursuit of continuous improvement

Which enterprise role ensures the board is kept informed of major decisions related to value delivery of I&T deployment in accordance with the enterprise strategy?

A. Executive committee
B. Chief information officer
C. Chief executive officer

When tailoring the COBIT organization structure to organizational context and priorities, which of the following should be done NEXT after mapping organizational structures with specific responsibility or accountability?

A. Revise the organizational hierarchy with job descriptions
B. Adapt the COBIT roles and organizational structures
C. Add two levels of involvement for consulted and informed

Which of the following frameworks has been used as a basis for developing guidance for the COBIT governance component of people, skills and competencies?

A. Cyber Security Framework
B. Skills Framework for the Information Age
C. Sans Security Policy Framework

Which of the following could be used to map documentation for governance and management practices?

A. Process activities with detailed procedures
B. Policies and standards used within the enterprise
C. Relevant inputs and outputs with source and destination

Which of the following COBIT components includes a list of artifacts with links to relevant governance and management practices?

A. Policies and procedures
B. Information flow and items
C. Organizational structures