COBIT 2019 Design and Implementation

By Isaca · Question Mode

QuestionQ71

VerifiedKey Topics Decision Matrix

An enterprise intends to outsource all its noncore IT operations but wants to ensure an appropriate level of governance, risk and compliance (GRC) controls. Which of the following governance and management objectives would provide the MOST relevant management practices for the enterprise?

Explanation

APO10 Managed Vendors provides practices for evaluating and selecting vendors, managing vendor relationships and contracts, addressing vendor risk, and monitoring vendor performance and compliance. These controls directly govern outsourced IT operations while accountability remains with the enterprise.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!