NIST-COBIT-2019 practice question 5 of 10

Which of the following COBIT and NIST implementation steps may be reversed depending on the culture of the organization?

Full set: 50 questions
Answer options
A: Step 4: Conduct a Risk Assessment and Step 6: Determine, Analyze, and Prioritize Gaps
B: Step 3: Create a Current Profile and Step 5: Create a Target Profile
C: Step 1: Prioritize and Scope and Step 2: Orient Correct answer
Correct Answer:
C. Step 1: Prioritize and Scope and Step 2: Orient
Explanation

According to the ISACA guide, the order of these two steps may be reversed depending on the culture of the organization and the level of stakeholder engagement1. Some organizations may prefer to start with a broad orientation of the NIST CSF and COBIT 2019 before scoping and prioritizing the implementation, while others may want to define the scope and priorities first and then orient the stakeholders accordingly. Reference Implementing the NIST Cybersecurity Framework Using COBIT 2019, page 17.

Scroll to Top