Which of the following is IMPERATIVE to the successful implementation of IT governance?

Executive sponsorship is imperative for the successful implementation of IT governance. According to the COBIT framework, governance is the responsibility of the board of directors and executive management. This top-level commitment provides the necessary authority, vision, resources, and mandate to drive the initiative across the enterprise. Without this sponsorship, any attempt to implement a governance system will lack the power to enforce decisions, overcome resistance to change, and ensure alignment with strategic business objectives, making failure highly probable.

A. IT governance identifies benchmarking standards. Benchmarking is a useful practice for performance measurement within an established governance system, but it is not a foundational requirement for its initial successful implementation.
B. IT governance includes identification of business risk. Identifying business risk is a critical activity and outcome of a functioning IT governance system, not the primary prerequisite for its successful implementation.

1. ISACA, COBIT® 2019 Implementation Guide, 2018. In Phase 1 of the implementation life cycle, "What Are the Drivers?", a key management practice is to "Obtain senior management commitment and support." The guide lists "Top management sponsorship" as a critical success factor for the program management. (p. 21).

2. ISACA, COBIT® 2019 Framework: Governance and Management Objectives, 2018. The governance objective EDM01 "Ensured Governance Framework Setting and Maintenance" explicitly states that the board and executive management are the primary accountable parties for establishing and maintaining the governance system. (p. 31).

3. ISACA, COBIT® 2019 Framework: Introduction and Methodology, 2018. The framework establishes that governance ensures stakeholder needs are evaluated to determine balanced, agreed-on enterprise objectives. This evaluation and direction-setting function is inherently an executive-level responsibility. (p. 12, Section 3.2).