Assessing Corporate Cybersecurityintermediate
Describe the COBIT goals cascade and explain how it links stakeholder needs to governance and management work.
Answer
The goals cascade begins with stakeholder drivers and needs, which inform enterprise goals. Enterprise goals then cascade into alignment goals that connect information technology efforts with business objectives. These alignment goals then cascade into COBIT governance and management objectives. This top-down link helps ensure that technology work supports enterprise priorities.
Explanation
### What a good answer covers
- Stakeholder drivers and needs are the starting point.
- These inform enterprise goals.
- Enterprise goals cascade to alignment goals that connect technology work to business objectives.
- Alignment goals inform governance and management objectives.
### The concept
The goals cascade is a top-down method for translating broad needs into actionable direction. Stakeholders express needs and expectations; the enterprise sets goals in response; alignment goals relate information technology effort to those enterprise goals; and COBIT objectives guide governance and management activity. The cascade is intended to keep technology work connected to business purpose rather than treating it as an isolated function.
### Terms
- **Alignment goal**: a goal that emphasizes aligning information technology efforts with business objectives.
- **Stakeholder**: a person or group whose needs or interests affect or are affected by the enterprise.
### Remember
Trace the cascade from stakeholder needs down to enterprise goals, alignment goals, and COBIT objectives.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free