Which of the following should be the ULTIMATE outcome of adopting enterprise governance of information and technology in cybersecurity?

The ultimate goal of Enterprise Governance of Information and Technology (EGIT) is value creation. According to ISACA's COBIT framework, governance exists to ensure that I&T investments and operations generate business value. This is achieved by balancing three key objectives: benefits realization (creating value for the business), risk optimization (managing risks within the enterprise's risk appetite), and resource optimization (using I&T resources effectively and efficiently). The other options are components that contribute to this overarching goal, but value creation is the ultimate purpose.

A. Business resilience is a component of benefits realization and risk optimization, contributing to the ultimate goal but is not the goal itself.
B. Risk optimization is one of the three primary governance objectives that support the ultimate goal of value creation, not the final outcome.
C. Resource optimization is also one of the three primary governance objectives that support the ultimate goal of value creation.

1. ISACA. (2018). COBIT 2019 Framework: Introduction and Methodology. "The primary goal of any enterprise is value creation for its stakeholders... Value creation is the main governance objective of an enterprise." p. 11.

2. De Haes, S., & Van Grembergen, W. (2015). Enterprise Governance of Information Technology: Achieving Alignment and Value, Featuring COBIT 5. Springer. Chapter 2, "The Governance of Enterprise IT," discusses how the goal of GEIT is value creation through the balance of benefits, risk, and resources. DOI: https://doi.org/10.1007/978-3-319-14547-1

3. Turel, O., & Bart, C. (2014). Board-level IT governance and organizational performance. European Journal of Information Systems, 23(2), 223-239. This academic paper reinforces that the purpose of IT governance is to ensure IT creates business value. DOI: https://doi.org/10.1057/ejis.2012.60