When considering the compliance requirement design factor, and the design factor value is high, which of the following should be a management objective priority?

The COBIT 2019 Design Guide provides a direct mapping between the values of design factors and the priority of management objectives. For the "Compliance Requirements" design factor, a high value indicates that the enterprise is subject to significant external laws and regulations. The management objective APO12 Managed Risk is given the highest possible importance adjustment in this scenario. This is because managing compliance is fundamentally about identifying, assessing, and responding to the risk of non-conformance with these external requirements.

A. Managed data (APO14) is not identified as a primary objective directly influenced by high compliance requirements in the COBIT Design Guide tables.
B. Managed relationships is a generic term; specific objectives like APO08 are not prioritized as highly as risk management for compliance purposes.
D. Managed security (APO13) is important for compliance, but the Design Guide prioritizes the broader Managed Risk (APO12) objective more highly for this specific design factor.

1. ISACA, COBIT® 2019 Design Guide: Designing an Information and Technology Governance Solution, 2018, Table 4.7—Design Factor 6: Compliance Requirements, p. 33. This table shows that for a "High" value, APO12 Managed Risk receives a "+2" adjustment to its base importance, the highest possible increase, making it a top priority.

2. ISACA, COBIT® 2019 Framework: Governance and Management Objectives, 2018, APO12 Managed Risk, p. 83. The description of APO12 includes ensuring that "I&T-related risk does not exceed the enterprise’s risk appetite and risk tolerance," which directly encompasses compliance risk.