Which of the following roles should be involved when nominating key program roles to create the appropriate governance environment?

According to the COBIT 2019 framework, establishing and maintaining the governance system is the primary responsibility of the governing body (i.e., the board and executive management). Nominating key program roles is a foundational activity in creating the appropriate governance environment and setting the direction for the enterprise. This task falls under the governance domain, which is directed and overseen by the highest level of leadership to ensure that stakeholder needs are evaluated and agreed-upon enterprise objectives are achieved.

A. IT management is responsible for executing and managing IT activities within the governance framework established by the board and executives, not for creating the framework itself.
B. Business management operates within the governance structure to achieve enterprise goals; they are key stakeholders but do not hold the ultimate accountability for nominating governance roles.
C. Human resources is a support function that facilitates the recruitment and administrative aspects of staffing these roles but does not have the authority to nominate key governance positions.

1. ISACA, COBIT 2019 Framework: Governance and Management Objectives, 2018, p. 32. The governance practice EDM01 (Ensured Governance Framework Setting and Maintenance) explicitly places accountability for directing the governance system, including its structures, with the board and CEO, as shown in the RACI chart.

2. ISACA, COBIT 2019 Framework: Introduction and Methodology, 2018, p. 21, Figure 3.3. This figure illustrates the distinction between governance and management, showing that governance objectives (Evaluate, Direct, Monitor - EDM) are the purview of the governing body (Board of Directors).

3. ISACA, COBIT 2019 Implementation Guide, 2018, p. 21, Section 3.2.1. This section discusses program roles and responsibilities, highlighting the critical role of the executive sponsor and steering committee (composed of senior executives) in championing and directing the implementation program.