QuestionQ47

VerifiedThe Governance System Design Workflow

After a bank suffered cyberattacks that severely affected operations and prompted regulatory questions, the board required the newly hired CIO to implement global best practices to reduce this risk. The CIO is using COBIT 2019 to tailor the governance system and has identified a high threat landscape as a critical design factor. Which of the following should the CIO identify next?

Explanation

COBIT 2019 uses the threat landscape as a design factor to refine governance-system scope and prioritize the applicable governance and management objectives. A high threat environment requires emphasis on security-related processes, which establish the controls and activities for managing cybersecurity risk. Specific security solutions and technology staffing are subsequent implementation and resourcing considerations.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!