COBIT 2019 Foundation study guide
COBIT 2019 Foundation · Work through your exam, one topic at a time.
This independent study page provides practice for COBIT 2019 Foundation. Its editorial learning areas include COBIT2019 governance, value and tailored systems; COBIT objectives, capability and implementation evidence; Cyber-risk identification and analysis; Security operations, monitoring and response; Continuity, backup and technical recovery. The questions develop subject knowledge and application through worked reasoning, distinctions between competing answers, and practical scenarios. Study the relevant guide before attempting a mixed set, then explain the evidence or calculation that supports each answer. The COBIT 2019 Foundation study guide has 5 sections and about 3,017 words.
01COBIT2019 governance, value and tailored systems
COBIT2019 supports governance and management of enterprise information and technology across the enterprise, rather than only the IT department. Governance evaluates stakeholder needs and options, directs priorities and monitors the intended outcomes.
364 words, about 2 min02COBIT objectives, capability and implementation evidence
COBIT2019 groups its governance and management objectives into the EDM, APO, BAI, DSS and MEA domains. EDM concerns governance evaluation, direction and monitoring, while the other domains organize related management work.
373 words, about 2 min03Cyber-risk identification and analysis
IT risk assessment has three phases. Identification builds the inventory: assets, processes, data flows, threats, vulnerabilities, and existing controls, often through risk scenarios ("who or what could exploit which vulnerability, and with what consequence?").
747 words, about 4 min04Security operations, monitoring and response
This domain is about running security as a repeatable service rather than a series of heroic acts. Questions target process ownership, change control and the operational metrics that show the programme is working.
803 words, about 4 min05Continuity, backup and technical recovery
This domain tests continuity planning: how an organisation keeps critical services running during disruption and how it recovers afterwards. Distinguish the continuity plan from the disaster recovery plan and know the time-based metrics precisely.
730 words, about 4 min