Isaca COBIT-Design-and-Implementation Exam - Topic 4 Question 5 Discussion

In the third stage of the Governance System Design Workflow, refining the scope of the governance system involves aligning it closely with the overall strategic direction and objectives of the enterprise. COBIT 2019 emphasizes that the governance system should support the enterprise's strategy to ensure that I&T-related activities contribute effectively to achieving business goals.

Key considerations for refining the scope include:

Enterprise Strategy (Option A): The primary consideration is ensuring that the governance system aligns with and supports the enterprise strategy. This involves understanding the strategic objectives, goals, and priorities of the organization and ensuring that the governance system is designed to help achieve these strategic aims. This alignment ensures that IT governance is not just a compliance exercise but a strategic enabler for business success.

Current I&T-Related Risks (Option B): While important, this factor is more about addressing immediate operational concerns and is typically considered earlier in the process to identify and mitigate significant risks.

The Risk Profile (Option C): Understanding the overall risk profile and risk appetite of the enterprise is crucial for shaping the governance system but is not the primary focus in the third stage. This aspect is usually addressed in earlier stages to ensure that the governance framework adequately covers risk management.

Compliance Requirements (Option D): Ensuring compliance is always a critical consideration, but like risk management, it is typically addressed earlier in the design process. Compliance requirements should be integrated into the governance framework but are not the key driver at the refining stage.

Thus, the correct answer is A. Enterprise strategy. By focusing on the enterprise strategy during the third stage of the Governance System Design Workflow, the governance system can be refined to support strategic initiatives, thereby ensuring that IT governance contributes directly to achieving business goals.

ISACA. COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution. ISACA.

ISACA. COBIT 2019 Framework: Introduction and Methodology. ISACA.