Discuss Isaca COBIT-Design-and-Implementation Exam Topic 7 Question 26

When considering the compliance requirement design factor, and the design factor value is high, which of the following should be a management objective priority?

AManaged data (AP014)

BManaged relationships

CManaged risk

DManaged security (AP013)

Suggested Answer: C

In environments with high compliance requirements, managing risk is crucial to avoid legal penalties, financial losses, and reputational damage. The 'Managed risk' objective ensures that risks related to compliance are identified, assessed, and mitigated effectively.

COBIT 2019 Framework Reference:

COBIT 2019 Framework: Governance and Management Objectives, APO12 Managed Risk: This objective focuses on establishing a risk management framework to identify and mitigate risks, including those related to compliance.

COBIT 2019 Design Guide, Chapter 2: Emphasizes the importance of managing risk in environments with high compliance requirements.

Prioritizing 'Managed risk' ensures that the enterprise has robust processes in place to manage compliance-related risks, thereby safeguarding the organization against potential regulatory issues.

Get Premium COBIT-Design-and-Implementation Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Izetta 10 months ago

High design factor means risk management is a must!

Tambra 10 months ago

Wait, are we sure managed relationships aren't the key here?

Raul 10 months ago

Managed data is crucial too, can't overlook it!

Mitsue 10 months ago

I think managed security is more important in this case.

Adolph 11 months ago

Definitely managed risk should be the priority!

Clarinda 11 months ago

I’m leaning towards managed relationships because they can impact compliance, but I’m not confident that’s the priority when the design factor is high.

Cherilyn 11 months ago

Managed data seems important, especially with compliance, but I feel like managed risk might be the right answer here.

Gladys 11 months ago

I think we practiced a question like this where managed security was emphasized, but I can't recall if it was the top priority in all cases.

Lezlie 12 months ago

I remember something about high design factor values indicating a greater need for risk management, but I'm not entirely sure if that's the main priority.

Justa 12 months ago

I feel pretty confident about this one. When compliance is a high priority, the management objective should be to prioritize managed security (AP013) to ensure the system meets all the necessary compliance requirements.

Marcos 12 months ago

Okay, let's see. If the compliance requirement design factor is high, that means compliance is a major concern. So I would guess that managed risk (C) would be the best answer, since that's focused on mitigating compliance risks.

Janna 1 year ago

Hmm, I'm a bit unsure about this one. The question is asking about management objectives, but it's not clear to me how that relates to the compliance requirement design factor. I'll need to think this through carefully.

Pearlene 1 year ago

This question seems pretty straightforward. I think the key is to focus on the compliance requirement design factor being high, which suggests that managed security (AP013) should be the priority.

Roxanne 1 year ago

D. Managed security (AP013) is the way to go. Anything less, and you might as well just hand over your credentials to the highest bidder. Talk about a compliance nightmare!

Delisa 1 year ago

D. Managed security (AP013) all the way. Can't have compliance without security, am I right? Unless, of course, you're a hacker trying to game the system. Then I guess you'd go for B. Managed relationships. Wink, wink.

Josue 1 year ago

B. Managed relationships? Really? I think the exam writers have been watching too many corporate motivational videos. Give me some good old-fashioned managed security any day!

Howard 1 year ago

↳ replying to Josue

Totally agree! Security first!

Marnie 1 year ago

↳ replying to Josue

You can't go wrong with emphasizing managed security!

Lavina 1 year ago

↳ replying to Josue

Managed security is definitely the way to go!

Joana 1 year ago

C. Managed risk, without a doubt. Can't go wrong with that choice. Gotta keep those compliance risks in check, you know?

Estrella 1 year ago

Definitely D. Managed security (AP013) should be the top priority when the compliance requirement design factor is high. No brainer!

Reena 1 year ago

I believe Managed risk should also be a priority, as it helps in identifying and mitigating potential threats.

Leandro 1 year ago

I agree with Ozell, Managed security is crucial for compliance requirements.

Ozell 1 year ago

I think the management objective priority should be Managed security (AP013).

Isaca COBIT-Design-and-Implementation Exam - Topic 7 Question 26 Discussion