COBIT 2019 Foundation — Question 120

Which COBIT domain of management objectives incorporates managed risk?

Answer options

• A. Build, acquire and implement (BAI)
• B. Align, plan and organize (APO)
• C. Deliver, service and support (DSS)

Correct answer: B

Explanation

The correct answer is B, Align, plan and organize (APO), as it emphasizes setting objectives that include managing risk within the organization. Options A and C, Build, acquire and implement (BAI) and Deliver, service and support (DSS), focus on other aspects of IT governance and do not primarily address risk management.