Which of the following focus area variants should be considered when the role of IT design factor has a value of Strategic?

A focus area describes a specific governance topic that can be addressed by a collection of governance and management objectives. The choice of a focus area is influenced by the enterprise's context, as defined by the design factors. When the "Role of IT" design factor has a value of "Strategic," it signifies that IT is a critical enabler of business innovation and strategy. This aligns directly with the concept of "Digital Transformation," which is a focus area variant centered on using technology to fundamentally reshape business models and create new value streams.

A. Information security is a foundational focus area relevant to all enterprises, not one specifically indicated by a strategic role for IT over others.
C. DevOps is a specific methodology and cultural approach; while it can support a strategic IT role, it is a component of a broader transformation, not the overarching focus area itself.
D. Cloud is a technology sourcing model. It is an enabler for digital transformation but is not the focus area variant most directly associated with a strategic role for IT.

1. ISACA, COBIT® 2019 Design Guide: Designing an Information and Governance System, 2018, Chapter 5, Impact of Design Factors on the Governance System, p. 49.

2. ISACA, COBIT® 2019 Design Guide: Designing an Information and Governance System, 2018, Table 5.1, Design Factor Influence on Focus Area Selection, p. 49.