COBIT 2019Demo

By Isaca · Question Mode

QuestionQ107

Implementation

Which of the following must be performed FIRST when implementing a culture and behavior governance component to ensure effective governance and management of IT?

  • A Define an approach for assessing the level of compliance.
  • B Define a set of desirable or undesirable behaviors.
  • C Determine the capability levels.
Explanation

A culture, ethics, and behavior component begins by defining the behaviors that are desired and those that are unacceptable. Those definitions provide the baseline for communication, incentives, enforcement, and later compliance assessment. ISACA describes this component as guidance on desired cultural elements that support governance or management objectives.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!