Assessing Corporate Cybersecurityintermediate
Select ALL principles of COBIT listed in the course material.
Answer
Meeting stakeholder needs, Covering enterprises from an end-to-end perspective, Separating governance from management
Explanation
### Why this is right
- **Meeting stakeholder needs** is a listed COBIT principle.
- **Covering enterprises from an end-to-end perspective** is another listed principle.
- **Separating governance from management** is also explicitly listed.
### The concept
COBIT’s principles support enterprise-wide governance rather than a narrow technical view. The material also says governing boards and senior managers should be involved in information and technology decisions. Assigning cybersecurity solely to the information technology department is not a COBIT principle and conflicts with the emphasis on enterprise governance.
### The other options
- **Making the information technology department solely accountable for cybersecurity**: this is not a listed COBIT principle; the framework emphasizes enterprise governance and senior involvement.
### Terms
- **End-to-end perspective**: considering the enterprise as a whole rather than focusing on isolated technical areas.
- **Stakeholder need**: an expectation or requirement that matters to a person or group connected to the enterprise.
### Remember
COBIT applies across the enterprise and connects stakeholder needs to governance and management.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free