Isaca Exam COBIT-2019 Topic 2 Question 61 Discussion

Actual exam question for Isaca's COBIT-2019 exam

Question #: 61
Topic #: 2

[All COBIT-2019 Questions]

An enterprise plans to outsource all of its noncore IT operations but wants to ensure the proper level of governance, risk and compliance (GRC) controls. Which of the following governance and management objectives would provide the MOST relevant management practices for the enterprise?

AAP012 Managed Risk

BAPO10 Managed Vendors

CAP013 Managed Security

DAPO09 Managed Service Agreements

Show Suggested Answer

Suggested Answer: D

According to the ISACA COBIT 2019 Framework, the objective APO09 Managed Service Agreements provides the most relevant management practices for an enterprise that plans to outsource all its non-core IT operations but wants to ensure the proper level of governance, risk, and compliance (GRC) controls. This is specified in Domain 4, Objective 4.5: 'Manage the acquisition and maintenance of IT-related assets'. The APO09 objective provides guidance on how to manage service agreements with vendors, including the proper management of risks and compliance with related regulations and standards. Additionally, APO09 provides guidance on the proper selection and management of service providers, and how to ensure that the service agreements are properly monitored and evaluated to ensure the expected quality of service.

by Truman at Sep 19, 2024, 12:27 PM

Limited Time Offer

25%

Off

Get Premium COBIT-2019 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marvel

9 months ago

You know, this question really makes me wonder if the exam writers have ever actually outsourced anything in their lives. But I digress, I'd go with D) APO09 Managed Service Agreements. Gotta have those SLAs on lockdown.

upvoted 0 times

Josefa

7 months ago

Managing vendors with B) APO10 is also key to successful outsourcing.

upvoted 0 times

...

Ruby

7 months ago

I think C) AP013 Managed Security is also important to ensure data protection.

upvoted 0 times

...

Vinnie

8 months ago

I agree, D) APO09 Managed Service Agreements is crucial for outsourcing IT operations.

upvoted 0 times

...

Larae

9 months ago

Well, well, look at us IT pros pondering over outsourcing. I say we all take a break and have a good laugh. But in all seriousness, I think B) APO10 Managed Vendors is the way to go. Gotta keep those vendors in check!

upvoted 0 times

...

Reed

9 months ago

Why do you think that?

upvoted 0 times

...

Leonor

9 months ago

Ah, the age-old question of outsourcing non-core IT. I'd go with C) AP013 Managed Security. Can't forget about the security implications, am I right?

upvoted 0 times

Lynette

8 months ago

Managed Risk is essential to consider as well, to mitigate any potential threats.

upvoted 0 times

...

Rebbeca

8 months ago

Managed Vendors could also be crucial for effective outsourcing.

upvoted 0 times

...

Luann

8 months ago

I think Managed Service Agreements are important too, to ensure everything is running smoothly.

upvoted 0 times

...

Mari

8 months ago

I agree, security is definitely a top priority.

upvoted 0 times

...

Deja

9 months ago

D) APO09 Managed Service Agreements seems like the way to go. You need to have solid service-level agreements in place when outsourcing, don't you?

upvoted 0 times

...

Paul

9 months ago

I think the correct answer is B) APO10 Managed Vendors. Outsourcing IT operations would require proper vendor management practices to ensure compliance and risk mitigation.

upvoted 0 times