An enterprise has established a new department to oversee the life cycle of activities that support data management objectives. Which of the…

After an organizational structure, such as a new department, is established, the immediate priority is to make it operational by defining how it will function. Establishing a RACI (Responsible, Accountable, Consulted, Informed) chart is a fundamental governance activity that clarifies roles and responsibilities for the department's mandated activities. This provides the necessary framework and accountability for all subsequent tasks. Without clearly defined roles, any attempt to perform other functions, such as assessing business models or developing plans, would be inefficient and lack clear ownership, leading to confusion and potential gaps in responsibility.

A. Developing a business continuity plan (BCP) is a critical task for the new department, but it can only be effectively undertaken once roles and responsibilities for the process are assigned.

B. Assessing the current data business model is a key activity, but it requires a clear understanding of who is responsible for leading and contributing to the assessment.

C. Reviewing data privacy requirements is an essential compliance activity that will be assigned to specific roles within the new department after those roles have been formally defined.

1. ISACA

CGEIT Review Manual

8th Edition

2020. Domain 1: Governance of Enterprise IT

Section 1.5

Governance of Enterprise IT Implementation. This section emphasizes that key governance practices include defining organizational structures and then defining the associated roles and responsibilities to ensure accountability.

2. ISACA

COBIT 2019 Framework: Governance and Management Objectives

2018. Governance and Management Objective APO01

Managed I&T Management Framework. Practice APO01.03

"Define roles

responsibilities and relationships

" explicitly states the need to establish clear roles and responsibilities to ensure the governance system functions effectively. This is a foundational step after creating any new organizational entity.

3. ISACA

COBIT 2019 Framework: Governance and Management Objectives

2018. Governance and Management Objective APO07

Managed Human Resources. Practice APO07.02

"Define and maintain job roles and skills requirements

" highlights the importance of defining roles as a prerequisite for managing human resources and their activities effectively.