COBIT-2019 · Question #288
An enterprise plans to outsource all of its noncore IT operations but wants to ensure the proper level of governance, risk and compliance (GRC) controls. Which of the following governance and…
The correct answer is D. APO09 Managed Service Agreements. According to the ISACA COBIT 2019 Framework, the objective APO09 Managed Service Agreements provides the most relevant management practices for an enterprise that plans to outsource all its non-core IT operations but wants to ensure the proper level of governance, risk, and…
Question
An enterprise plans to outsource all of its noncore IT operations but wants to ensure the proper level of governance, risk and compliance (GRC) controls. Which of the following governance and management objectives would provide the MOST relevant management practices for the enterprise?
Options
- AAP012 Managed Risk
- BAPO10 Managed Vendors
- CAP013 Managed Security
- DAPO09 Managed Service Agreements
How the community answered
(45 responses)- A11% (5)
- B2% (1)
- C4% (2)
- D82% (37)
Explanation
According to the ISACA COBIT 2019 Framework, the objective APO09 Managed Service Agreements provides the most relevant management practices for an enterprise that plans to outsource all its non-core IT operations but wants to ensure the proper level of governance, risk, and compliance (GRC) controls. This is specified in Domain 4, Objective 4.5: "Manage the acquisition and maintenance of IT-related assets". The APO09 objective provides guidance on how to manage service agreements with vendors, including the proper management of risks and compliance with related regulations and standards. Additionally, APO09 provides guidance on the proper selection and management of service providers, and how to ensure that the service agreements are properly monitored and evaluated to ensure the expected quality of service.
Topics
Community Discussion
No community discussion yet for this question.