COBIT 2019 Foundation — Question 35

Which of the following is MOST important to providing trust in operations, confidence in the achievement of enterprise objectives, and an adequate understanding of residual risk?

Answer options

• A. A continuity of operations response plan
• B. A risk management framework
• C. A managed system of internal controls

Correct answer: C

Explanation

A managed system of internal controls is essential for ensuring that operations are trustworthy and that enterprise objectives are met while also providing an understanding of residual risks. While a continuity of operations response plan and a risk management framework are important, they do not provide the comprehensive oversight and accountability that a managed system of internal controls does.