Which of the following is a principle associated with the key components of a governance framework?

1. A. The interaction among key components will impede automation and should therefore be limited.
2. B. The relationships among key components should be identified to maximize consistency.
3. C. Key components should function independently to maintain integrity.

Correct Answer: C

Which of the following is based on generic components of a governance system but are tailored for a specific purpose or context within a focus area?

1. A. Guiding principles
2. B. Variant components
3. C. Design factors

Correct Answer: B
These components (of a governance system) can be either generic or “variants of generic.” Generic components are described in the COBIT Core Model and apply in principle to any situation (although they “generally need customization before being practically implemented.”) Whereas variants are based on the generic components but tailored for a specific purpose or context within a focus area.

Which of the following metrics would BEST enable an enterprise to evaluate an alignment goal specifically related to security of information and privacy?

1. A. Ratio and extent of erroneous business decisions in which erroneous I&T-related information was a key factor
2. B. Number of critical business processes supported by up-to-date infrastructure and applications
3. C. Number of confidentiality incidents causing financial loss, business disruption or public embarrassment.

Correct Answer: C