Discuss Isaca COBIT-Design-and-Implementation Exam Topic 4 Question 32

When tailoring COBIT 2019 to enterprise requirements, which of the following is the PRIMARY objective of preparing a risk profile?

ATo identify areas of risk that require mitigation

BTo identify areas of risk that exceed risk appetite

CTo identify areas of risk that cause technology disruption

DTo identify areas of risk that impact business continuity

Suggested Answer: B

According to the COBIT 2019 Design Guide:

'A key purpose of defining a risk profile is to compare identified risks with the enterprise's risk appetite. This allows the organization to prioritize areas where risk levels exceed acceptable thresholds and guide risk treatment plans accordingly.'

The risk profile doesn't just highlight risks in general---it is specifically about those exceeding the enterprise's defined tolerance.

Get Premium COBIT-Design-and-Implementation Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Pete 5 months ago

C is relevant, but not the primary focus. Disruption is part of the bigger picture.

Delisa 5 months ago

D is important! Business continuity is crucial for operations.

Rosio 6 months ago

A seems solid too. Mitigation is key for any risk profile.

Glory 6 months ago

I think B is the best choice. It focuses on risk appetite.

Jade 6 months ago

Totally agree with A, that's the main focus!

Rozella 6 months ago

Wait, are we sure it's not C? Disruption seems huge.

Cathrine 6 months ago

Definitely A, mitigation is key!

Henriette 6 months ago

I think it's more about business continuity, honestly.

Andra 7 months ago

It's all about identifying risks that exceed appetite.

Merrilee 7 months ago

D) is too narrow. The risk profile should identify risks that impact the whole business, not just continuity.

Dawne 7 months ago

Haha, I bet the exam writers had a field day coming up with these answer choices. Gotta love those COBIT questions!

Margarita 8 months ago

I think C) is a bit too specific. The risk profile should cover a broader range of risks, not just technology disruption.

Bronwyn 8 months ago

The risk profile is all about understanding your organization's risk tolerance. Option B is clearly the right answer here.

Micaela 8 months ago

B) To identify areas of risk that exceed risk appetite is the primary objective.

Ilene 8 months ago

I thought the risk profile was mainly about identifying disruptive risks, so I’m torn between options B and C.

Lashaun 8 months ago

I feel like option D could also be relevant since business continuity is crucial, but I’m uncertain if it’s the primary focus.

Clarinda 8 months ago

I remember a practice question that focused on risk mitigation, so I might lean towards option A.

Elden 9 months ago

I think the primary objective is about identifying risks that exceed risk appetite, but I'm not entirely sure.

Beata 9 months ago

Ugh, risk management questions can be tricky. I'm not 100% sure about the nuances here. I think I'll eliminate the options about technology disruption and business continuity, since those seem more like secondary considerations. Then I'll have to decide between A and B. Hmm, I'll go with B for now, but I'm not super confident.

Julian 9 months ago

I feel confident that the primary objective is to identify areas of risk that exceed the organization's risk appetite. That seems to be the core purpose of a risk profile in the COBIT framework. I'll mark B as my answer.

Grover 9 months ago

Okay, let me think this through. The question is asking about the primary objective of preparing a risk profile when tailoring COBIT 2019. I'm pretty sure the goal is to get a comprehensive view of the organization's risks so they can be properly addressed, so I'll go with B.

Marg 9 months ago

Hmm, I'm a bit unsure about this one. I know COBIT is all about managing IT risks, but I'm not sure if the primary objective is just to identify high-risk areas or something more specific. I might need to review my notes on COBIT 2019 risk management.

Julie 10 months ago

This question seems straightforward - I think the primary objective is to identify areas of risk that exceed the organization's risk appetite, so I'll go with B.

Raymon 3 months ago

↳ replying to Julie

D makes sense too, business continuity is crucial.

Haydee 4 months ago

↳ replying to Julie

I’m leaning towards A. Mitigation is key.

Arlie 5 months ago

↳ replying to Julie

I agree, B seems like the right choice.

Isaca COBIT-Design-and-Implementation Exam - Topic 4 Question 32 Discussion