QUESTION 15
Which of the following COBIT 2019 governance principles corresponds to the CSF application stating that CSF profiles support flexibility in content and structure?

QUESTION 16
During CSF life cycle action plan review, which of the following tasks is associated with realizing benefits?

QUESTION 17
The PRIMARY function of COBIT Implementation Phase 7: How Do We Keep the Momentum Going is to provide an opportunity for which of the following?

QUESTION 18
Which information should be collected for a Current Profile?

QUESTION 19
When coordinating framework implementation, the business/process level collaborates with the implementation/operations level to:

QUESTION 20
Which of the following is an objective of Implementation Phase 3 – Where Do We Want to Be?

QUESTION 21
Identifying external compliance requirements is MOST likely to occur during which of the following COBIT implementation phases?

QUESTION 22
The CSF Implementation Tiers distinguish three fundamental dimensions of risk management to help enterprises evaluate which of the following?

QUESTION 23
What is the MOST important reason to compare framework profiles?

QUESTION 24
Which of the following is a PRIMARY input into Steps 2 and 3: Orient and Create a Current Profile?

QUESTION 25
Which function of the CSF is addressed by incorporating governance, risk, and compliance (GRC) elements into the implementation plan?

QUESTION 26
When aligning to the NIST Cybersecurity Framework, what should occur after tier levels and framework core outcomes are determined?

QUESTION 27
Within the CSF Core structure, which type of capability can be implemented to help practitioners recognize potential or realized risk to enterprise assets?

QUESTION 28
Which of the following is an input to COBIT Implementation Phase 1: What Are the Drivers?

QUESTION 29
Which COBIT implementation phase directs the development of an action plan based on the outcomes described in the Target Profile?

QUESTION 30
Which of the following should an organization review to gain a better understanding of the likelihood and impact of cybersecurity events?

QUESTION 31
Which of the following is an important consideration when defining the roadmap in COBIT Implementation Phase 3 – Where Do We Want to Be?

QUESTION 32
In which CSF step should an enterprise document its existing category and subcategory outcome achievements?

QUESTION 33
Which of the following is a framework principle established by NIST as an initial framework consideration?

QUESTION 34
During CSF implementation, when is an information security manager MOST likely to identify key enterprise and supporting alignment goals as previously understood?