Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

Question

Options

• AIt allows executives to more effectively monitor IT implementation costs
• BImplementation of it eases an organization's auditing and compliance burden
• CInformation Security (IS) procedures often require augmentation with other standards
• DIt provides for a consistent and repeatable staffing model for technology organizations

• A
  4% (1)
• B
  74% (20)
• C
  15% (4)
• D
  7% (2)

Explanation

COBIT is specifically designed to bridge the gap between business goals and IT governance, making it the premier framework for aligning IT controls with regulatory and audit requirements. Organizations adopt COBIT primarily because it maps IT processes to compliance standards (like SOX, ISO 27001, and GDPR), reducing redundant audit work and giving auditors a structured, verifiable control environment - making B the best answer.

Why the distractors fall short:

• A is too narrow - while COBIT provides metrics, it is a governance framework, not a cost-monitoring tool; that's better served by ITFM/TBM frameworks.
• C describes a limitation, not a reason to use COBIT - and it actually applies broadly to many frameworks, not COBIT specifically.
• D describes something closer to workforce frameworks like SFIA or TOGAF; COBIT does not define staffing models.

Memory tip: Think of COBIT as the "auditor's friend" - its full name even says "Control Objectives," which is auditor language. If a question mentions governance, compliance, or audit alignment, COBIT is almost always the right answer.

No community discussion yet for this question.