Exam NIST-COBIT-2019 Topic 1 Question 42 Discussion
Actual exam question for ISACA's NIST-COBIT-2019 exam
Question #: 42
Topic #: 1
Question #: 42
Topic #: 1
Which of the following is a PRIMARY input into Steps 2 and 3: Orient and Create a Current Profile?
Suggested Answer: C Vote an answer
Defining business cases is a primary input into Steps 2 and 3: Orient and Create a Current Profile, because it involves identifying the business drivers, mission, objectives, and risk appetite of the organization, as well as the scope and boundaries of the cybersecurity program12. A business case is a document that provides the rationale and justification for initiating a cybersecurity project or program, and describes the expected benefits, costs, risks, and alternatives34.
References: 1: Cybersecurity Framework Components | NIST 2: Implementing the NIST Cybersecurity Framework Using COBIT 2019 | ISACA 3: Business Case Development - ISACA 4: How to Write a Business Case for Cybersecurity Projects | Infosec
References: 1: Cybersecurity Framework Components | NIST 2: Implementing the NIST Cybersecurity Framework Using COBIT 2019 | ISACA 3: Business Case Development - ISACA 4: How to Write a Business Case for Cybersecurity Projects | Infosec
by Herbert at Jul 16, 2026, 01:20 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).