Download ISACA.COBIT-2019.VCEplus.2024-11-23.78q.vcex

A focus area describes a specific governance topic, domain or issue that can be addressed by a collection of governance and management objectives and their components. A focus area provides guidance on how to apply COBIT to a specific business driver or pain point, such as digital transformation, cybersecurity, privacy, or business continuity. A focus area can also provide guidance on how to align COBIT with other standards, frameworks or regulations.A focus area is based on the COBIT 2019 Design Guide3, page 19.Reference:3: COBIT 2019 Design Guide | Digital | English

The alignment goal titled ''Delivery of IT services in line with business requirements'' is most likely to be associated with the metric ''percent of IT services with defined operational costs and expected benefits''. This metric measures the extent to which IT services are aligned with business needs and expectations, and deliver value for money. The alignment goal is one of the 17 enterprise goals defined in COBIT 2019, which describe the outcomes that an enterprise wants to achieve from its use of information and technology.The alignment goal is based on the COBIT 2019 Framework4, page 36.Reference:4: COBIT 2019 Framework | Digital | English

The alignment goal titled ''Knowledge, expertise and initiatives for business innovation'' is aligned to the Learning and Growth dimension of the IT balanced scorecard (BSC). The IT BSC is a tool that translates the IT-related goals into a set of performance indicators that can be measured and monitored. The Learning and Growth dimension focuses on the capabilities and skills of the IT staff, as well as the culture and climate that foster innovation and learning.The alignment goal is based on the COBIT 2019 Framework5, page 38.Reference:5: COBIT 2019 Framework | Digital | English

The primary objective of implementing the process of managed innovation is to improve customer experience by identifying and realizing new opportunities for business value creation from information and technology. This process involves scanning the external environment for emerging trends and technologies, engaging with stakeholders to understand their needs and expectations, evaluating and prioritizing innovative ideas, and executing and monitoring innovation initiatives.The process is based on the COBIT 2019 Design Guide1, page 75.Reference:1: COBIT 2019 Design Guide | Digital | English

The enterprise roles and organizational structures component is important to update in a COBIT RACI chart to align with the enterprise's context, priorities and preferred terminology. A RACI chart is a tool that assigns different levels of responsibility, accountability, consultation, and information to roles and organizational structures for each governance and management objective. A RACI chart consists of four components: enterprise roles and organizational structures, governance and management objectives, enterprise process practices and activities, and RACI assignments.The enterprise roles and organizational structures component should be updated to reflect the specific roles and structures that exist in the enterprise, as well as their names and descriptions.13Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Roles, Responsibilities & RACI Charts

The accountable (A) role drives a given task or process within an organizational structure chart (RACI chart). A RACI chart is a tool that assigns different levels of responsibility, accountability, consultation, and information to roles and organizational structures for each governance and management objective. The accountable (A) role means being answerable for the outcome or result of a task or process. There should be only one accountable role for each task or process, as having more than one can lead to confusion or conflict.The accountable role drives a given task or process by ensuring that it is performed effectively and efficiently, by providing direction and guidance, by resolving issues or conflicts, by approving changes or exceptions, etc.13Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Roles, Responsibilities & RACI Charts

The process practices that include inputs and outputs comprise the information flow component of a governance system. A governance system is a set of components that provide direction, oversight, evaluation, monitoring, assurance, etc., for an enterprise's information and technology. A governance system consists of seven components: governance components (such as structures, processes, principles, policies, etc.), governance enablers (such as people, skills, culture, information, services, etc.), governance outcomes (such as value creation, risk optimization, resource optimization, etc.), information flow (the exchange of information among components), culture (the shared values, beliefs, norms, and attitudes), ethical behavior (the conduct that conforms to moral principles), stakeholder needs (the requirements or expectations of internal or external stakeholders).The information flow component comprises the process practices that include inputs and outputs that enable the exchange of information among components.14Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance System

The information flow and items component of COBIT includes a list of artifacts with links to relevant governance and management practices. An artifact is a tangible or intangible object that is produced, modified, or used by a process or activity. An artifact can be a document, a report, a record, a plan, a policy, a procedure, a service, a product, etc.The information flow and items component of COBIT provides a comprehensive list of artifacts that are relevant for each governance and management objective, as well as links to the practices that produce, modify, or use them.12Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Governance System

The people, skills and competencies component of governance identifies the human resource needs that must be met to achieve governance and management objectives. People are the individuals or groups who perform or are accountable for the governance activities and tasks. Skills and competencies are the abilities and knowledge that people need to perform their roles and responsibilities.The people, skills and competencies component of governance defines the required roles and organizational structures for each governance and management objective, as well as the skills and competencies that are needed for each role.13Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Roles, Responsibilities & RACI Charts

The responsible role fulfills the practice and creates the intended outcome within an organizational structure chart (RACI chart). A RACI chart is a tool that assigns different levels of responsibility, accountability, consultation, and information to roles and organizational structures for each governance and management objective. The responsible role means performing or overseeing a task or process. There can be more than one responsible role for each task or process, but they must be coordinated by the accountable role.The responsible role fulfills the practice and creates the intended outcome by executing or supervising the process activities.13Reference:COBIT 2019 Framework: Introduction and Methodology,COBIT 2019 Framework: Roles, Responsibilities & RACI Charts