MENU
An enterprise plans to outsource all of its noncore IT operations but wants to ensure the proper level of governance, risk and compliance (GRC) controls. Which of the following governance and management objectives would provide the MOST relevant management practices for the enterprise?
Suggested Answer: D
Get Premium COBIT-2019 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
According to the ISACA COBIT 2019 Framework, the objective APO09 Managed Service Agreements provides the most relevant management practices for an enterprise that plans to outsource all its non-core IT operations but wants to ensure the proper level of governance, risk, and compliance (GRC) controls. This is specified in Domain 4, Objective 4.5: 'Manage the acquisition and maintenance of IT-related assets'. The APO09 objective provides guidance on how to manage service agreements with vendors, including the proper management of risks and compliance with related regulations and standards. Additionally, APO09 provides guidance on the proper selection and management of service providers, and how to ensure that the service agreements are properly monitored and evaluated to ensure the expected quality of service.
36 comments · newest first
DE
Devora
10 months ago
Surprised no one mentioned APO09 Managed Service Agreements!
KR
Krystina
11 months ago
AP013 Managed Security should definitely be a priority too!
DO
Dorothy
11 months ago
Wait, are we sure AP012 Managed Risk is enough?
KR
Kristel
11 months ago
Totally agree, vendor management is crucial!
KA
Kassandra
11 months ago
I think APO10 Managed Vendors is key for outsourcing.
LO
Lorenza
12 months ago
I’m leaning towards APO09 Managed Service Agreements because it seems to directly address the governance needed for outsourcing.
AL
Alaine
12 months ago
I practiced a question similar to this, and I think AP013 Managed Security is crucial, but it might not cover the vendor aspect as well as others.
LI
Lizette
12 months ago
I’m not entirely sure, but I feel like AP012 Managed Risk could also be relevant since they need to manage risks associated with outsourcing.
ME
Merilyn
1 year ago
I remember studying about the importance of vendor management in outsourcing, so I think APO10 Managed Vendors might be the best choice here.
NI
Nikita
1 year ago
I'm a bit confused by this question. All of the options seem relevant to some degree, but I'm not sure which one would be the "MOST relevant." I'll need to carefully read through each one and try to determine which one best addresses the specific requirements mentioned in the question.
CA
Carin
1 year ago
Okay, I've got this. Based on the question, I think the answer is B. APO10 Managed Vendors. This objective focuses on managing the relationship with external providers, which is exactly what the enterprise needs to do to ensure proper governance, risk, and compliance controls over its outsourced IT operations.
VI
Viola
1 year ago
Hmm, this is a tricky one. I'm not entirely sure which of these options would provide the most relevant management practices. I'll need to think through each one and try to determine which one best aligns with the enterprise's goals of ensuring proper GRC controls for its outsourced IT operations.
MA
Marguerita
1 year ago
This question is asking about the most relevant governance and management objectives for an enterprise that wants to outsource its noncore IT operations while ensuring proper GRC controls. I think I need to carefully consider each of the options and how they relate to the key requirements mentioned in the question.
HE
Herschel
1 year ago
Okay, let me think this through. RFM is a way to analyze customer behavior, so this is probably asking about a type of data analysis or customer segmentation technique. I'll have to weigh the options carefully.
MA
Marvel
2 years ago
You know, this question really makes me wonder if the exam writers have ever actually outsourced anything in their lives. But I digress, I'd go with D) APO09 Managed Service Agreements. Gotta have those SLAs on lockdown.
JO
Josefa
2 years ago
Managing vendors with B) APO10 is also key to successful outsourcing.
RU
Ruby
2 years ago
I think C) AP013 Managed Security is also important to ensure data protection.
VI
Vinnie
2 years ago
I agree, D) APO09 Managed Service Agreements is crucial for outsourcing IT operations.
LA
Larae
2 years ago
Well, well, look at us IT pros pondering over outsourcing. I say we all take a break and have a good laugh. But in all seriousness, I think B) APO10 Managed Vendors is the way to go. Gotta keep those vendors in check!
RE
Reed
2 years ago
Why do you think that?
LE
Leonor
2 years ago
Ah, the age-old question of outsourcing non-core IT. I'd go with C) AP013 Managed Security. Can't forget about the security implications, am I right?
LY
Lynette
2 years ago
Managed Risk is essential to consider as well, to mitigate any potential threats.
RE
Rebbeca
2 years ago
Managed Vendors could also be crucial for effective outsourcing.
LU
Luann
2 years ago
I think Managed Service Agreements are important too, to ensure everything is running smoothly.
MA
Mari
2 years ago
I agree, security is definitely a top priority.
DE
Deja
2 years ago
D) APO09 Managed Service Agreements seems like the way to go. You need to have solid service-level agreements in place when outsourcing, don't you?
PA
Paul
2 years ago
I think the correct answer is B) APO10 Managed Vendors. Outsourcing IT operations would require proper vendor management practices to ensure compliance and risk mitigation.
AR
Argelia
2 years ago
You're right, C) AP013 Managed Security is also important for governance and compliance.
NO
Norah
2 years ago
You're right, both B) APO10 Managed Vendors and C) AP013 Managed Security are crucial for outsourcing IT operations.
ST
Stevie
2 years ago
But don't you think C) AP013 Managed Security is also important for ensuring proper security controls?
VE
Veronika
2 years ago
I agree, B) APO10 Managed Vendors would be the most relevant for vendor management practices.
WI
Wilda
2 years ago
But what about security? Shouldn't that be a priority as well?
SO
Sommer
2 years ago
I agree, managing vendors is crucial for outsourcing IT operations.
CA
Catina
2 years ago
I think the correct answer is B) APO10 Managed Vendors.
LO
Louis
2 years ago
I disagree, I believe the answer is D) APO09 Managed Service Agreements.
RE
Reed
2 years ago
I think the answer is C) AP013 Managed Security.