Isaca COBIT-Design-and-Implementation Exam - Topic 7 Question 26 Discussion

Actual exam question for Isaca's COBIT-Design-and-Implementation exam

Question #: 26
Topic #: 7

[All COBIT-Design-and-Implementation Questions]

When considering the compliance requirement design factor, and the design factor value is high, which of the following should be a management objective priority?

AManaged data (AP014)

BManaged relationships

CManaged risk

DManaged security (AP013)

Show Suggested Answer

Suggested Answer: C

In environments with high compliance requirements, managing risk is crucial to avoid legal penalties, financial losses, and reputational damage. The 'Managed risk' objective ensures that risks related to compliance are identified, assessed, and mitigated effectively.

COBIT 2019 Framework Reference:

COBIT 2019 Framework: Governance and Management Objectives, APO12 Managed Risk: This objective focuses on establishing a risk management framework to identify and mitigate risks, including those related to compliance.

COBIT 2019 Design Guide, Chapter 2: Emphasizes the importance of managing risk in environments with high compliance requirements.

Prioritizing 'Managed risk' ensures that the enterprise has robust processes in place to manage compliance-related risks, thereby safeguarding the organization against potential regulatory issues.

by Tashia at Jul 11, 2025, 08:27 PM

Limited Time Offer

25%

Off

Get Premium COBIT-Design-and-Implementation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Izetta

2 months ago

High design factor means risk management is a must!

upvoted 0 times

...

Tambra

2 months ago

Wait, are we sure managed relationships aren't the key here?

upvoted 0 times

...

Raul

3 months ago

Managed data is crucial too, can't overlook it!

upvoted 0 times

...

Mitsue

3 months ago

I think managed security is more important in this case.

upvoted 0 times

...

Adolph

3 months ago

Definitely managed risk should be the priority!

upvoted 0 times

...

Clarinda

3 months ago

I’m leaning towards managed relationships because they can impact compliance, but I’m not confident that’s the priority when the design factor is high.

upvoted 0 times

...

Cherilyn

4 months ago

Managed data seems important, especially with compliance, but I feel like managed risk might be the right answer here.

upvoted 0 times

...

Gladys

4 months ago

I think we practiced a question like this where managed security was emphasized, but I can't recall if it was the top priority in all cases.

upvoted 0 times

...

Lezlie

4 months ago

I remember something about high design factor values indicating a greater need for risk management, but I'm not entirely sure if that's the main priority.

upvoted 0 times

...

Justa

4 months ago

I feel pretty confident about this one. When compliance is a high priority, the management objective should be to prioritize managed security (AP013) to ensure the system meets all the necessary compliance requirements.

upvoted 0 times

...

Marcos

4 months ago

Okay, let's see. If the compliance requirement design factor is high, that means compliance is a major concern. So I would guess that managed risk (C) would be the best answer, since that's focused on mitigating compliance risks.

upvoted 0 times

...

Janna

5 months ago

Hmm, I'm a bit unsure about this one. The question is asking about management objectives, but it's not clear to me how that relates to the compliance requirement design factor. I'll need to think this through carefully.

upvoted 0 times

...

Pearlene

5 months ago

This question seems pretty straightforward. I think the key is to focus on the compliance requirement design factor being high, which suggests that managed security (AP013) should be the priority.

upvoted 0 times

...

Roxanne

5 months ago

D. Managed security (AP013) is the way to go. Anything less, and you might as well just hand over your credentials to the highest bidder. Talk about a compliance nightmare!

upvoted 0 times

...

Delisa

5 months ago

D. Managed security (AP013) all the way. Can't have compliance without security, am I right? Unless, of course, you're a hacker trying to game the system. Then I guess you'd go for B. Managed relationships. Wink, wink.

upvoted 0 times

...

Josue

5 months ago

B. Managed relationships? Really? I think the exam writers have been watching too many corporate motivational videos. Give me some good old-fashioned managed security any day!

upvoted 0 times