MENU
After a bank experienced cyber attacks that severely impacted operations and raised questions from regulators, the board mandated the newly hired CIO to implement global best practices to mitigate this risk. The CIO is using COBIT 2019 to tailor the governance system and has identified high threat landscape as a critical design factor. Which of the following should the CIO identify NEXT?
Suggested Answer: A
Get Premium COBIT-Design-and-Implementation Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
After identifying a high threat landscape as a critical design factor, the CIO should next identify security-related processes. This step ensures that the governance system includes robust processes to manage and mitigate security risks.
In a high-threat landscape, focusing on security-related processes is essential to protect the enterprise's information assets and mitigate potential risks. These processes include incident management, vulnerability management, and access control, among others.
COBIT 2019 Framework Reference:
COBIT 2019 Framework: Governance and Management Objectives, APO13 Managed Security: This objective
42 comments · newest first
AN
Anissa
10 months ago
Wow, I didn't realize COBIT could be tailored like that!
KR
Kris
11 months ago
I thought technology personnel would be the priority here.
CA
Carma
11 months ago
Security-related processes are key for a solid foundation.
LA
Lachelle
11 months ago
Wait, shouldn't IT security solutions come first?
KI
Kimbery
11 months ago
Definitely need to focus on risk management practices!
SO
Sommer
12 months ago
I feel like technology personnel should be considered, but I’m leaning towards risk management practices as the next step. It’s all about understanding the threats first, right?
NO
Noel
12 months ago
I practiced a similar question where we had to prioritize actions after a security breach. I think IT security solutions could be the right choice here.
AD
Adelina
12 months ago
I'm not entirely sure, but I think identifying security-related processes might be crucial too. They could help in addressing the immediate vulnerabilities.
SK
Skye
1 year ago
I remember discussing the importance of risk management practices in class, especially after a cyber attack. It seems like a logical next step.
EL
Elin
1 year ago
I think the answer is B - risk management practices. The question specifically mentions the CIO needs to mitigate the cyber risk, so that seems like the most relevant next step after identifying security processes.
MI
Mirta
1 year ago
Okay, let me think this through. The CIO is using COBIT 2019, so I should probably look at the key design factors and see which one aligns best with the next step.
DO
Dorothy
1 year ago
Hmm, I'm a bit unsure here. The question mentions a high threat landscape, so I'm wondering if risk management practices might be the next logical step after identifying security processes.
MA
Marcelle
1 year ago
This seems like a straightforward question about implementing COBIT 2019 to address cyber risk. I'd focus on identifying the key security-related processes that need to be tailored.
FR
Franklyn
1 year ago
This seems like a straightforward question on risk assessment methods. I'm pretty confident I can identify the correct approach based on the description.
CA
Catherin
2 years ago
Security, risk, and processes - that's the holy trinity of cybersecurity. Better get it right, CIO!
DA
Dallas
2 years ago
Hah, technology personnel? Really? The CIO's gotta be on top of their game to handle this one.
BL
Blythe
2 years ago
C) IT security solutions
LI
Lisha
2 years ago
B) Risk management practices
KA
Kassandra
2 years ago
A) Security-related processes
TA
Tammy
2 years ago
I believe risk management practices should be the next priority, as they help in identifying and addressing potential threats.
PA
Paris
2 years ago
Hmm, I'm not so sure. I think the CIO should look at IT security solutions first. That's the real meat of the issue, right?
CH
Christene
2 years ago
Definitely, the CIO should consider both IT security solutions and risk management practices.
ED
Eden
2 years ago
Yes, but risk management practices are also crucial in addressing cyber threats.
AD
Adell
2 years ago
D) Technology personnel
TA
Tamala
2 years ago
I agree, IT security solutions should be the priority.
RY
Ryann
2 years ago
D) Technology personnel
CH
Cherry
2 years ago
C) IT security solutions
AN
Angelyn
2 years ago
B) Risk management practices
GO
Goldie
2 years ago
C) IT security solutions
BI
Billye
2 years ago
A) Security-related processes
LI
Lisbeth
2 years ago
B) Risk management practices
RE
Reita
2 years ago
A) Security-related processes
PE
Penney
2 years ago
I agree with Arthur, focusing on security processes is crucial in mitigating cyber risks.
HO
Howard
2 years ago
I agree, risk management is crucial here. But don't forget about security-related processes - those will be key too.
TO
Tomoko
2 years ago
D) Technology personnel
BE
Beatriz
2 years ago
C) IT security solutions
DO
Dorothea
2 years ago
B) Risk management practices
VI
Viola
2 years ago
A) Security-related processes
AR
Arthur
2 years ago
I think the CIO should identify security-related processes next.
DO
Dorothy
2 years ago
The CIO should definitely identify risk management practices as the next step. That's the foundation for everything else.
BO
Bok
2 years ago
B) Risk management practices
CA
Catarina
2 years ago
A) Security-related processes