COBIT-2019 practice question 23 of 25

Which of the following benefits derived from the use of COBIT is PRIMARILY associated with an external stakeholder?

Full set: 194 questions
Answer options
A: COBIT provides guidance on how to organize and monitor the performance of I&T across the enterprise.
B: COBIT helps to manage the dependency on the use of external service providers.
C: COBIT helps to ensure compliance with applicable rules and regulations. Correct answer
Correct Answer:
C. COBIT helps to ensure compliance with applicable rules and regulations.
Explanation

The primary driver for compliance with rules and regulations originates from external stakeholders, such as government bodies, regulators, and industry authorities. COBIT 2019 provides a structured framework that enables an enterprise to meet these external requirements and demonstrate due diligence. While internal stakeholders benefit from avoiding penalties, the fundamental need and assurance of compliance are directed toward these external entities. The management objective MEA03 Monitored Compliance with External Requirements is specifically designed to confirm that the enterprise complies with all applicable external requirements, directly addressing the needs of external stakeholders.

Why Incorrect

A. Organizing and monitoring I&T performance is a core internal governance and management activity, primarily benefiting internal stakeholders like the board, executive management, and IT leadership to achieve enterprise goals.
B. Managing dependencies on external service providers is an internal management responsibility (e.g., APO10 Managed Vendors). The benefit of effective management accrues directly to the enterprise itself, not primarily to the external provider.

References

1. ISACA, COBIT® 2019 Framework: Governance and Management Objectives, 2018, p. 221. The purpose of management objective MEA03, Monitored Compliance with External Requirements, is stated as: "Confirm that the enterprise is in compliance with all applicable external requirements." The related stakeholders listed include external regulators.

2. ISACA, COBIT® 2019 Framework: Introduction and Methodology, 2018, p. 31, Table 4.1. This table explicitly lists "Regulators" as a type of external stakeholder whose needs must be considered in the governance system.

3. ISACA, COBIT® 2019 Framework: Introduction and Methodology, 2018, p. 14, Section 2.6. This section highlights that a key use case for COBIT is to support "compliance with relevant laws, regulations and contractual agreements," which are imposed by external parties.

Scroll to Top