CobiT focuses on ________.

• A. Corporate governance
• B. Controlling entire IT function
• C. IT security governance
• D. All of the above about equally

Answer: (B)

COBIT is a framework for governing and managing enterprise IT. It provides a structured set of practices and control objectives to ensure IT supports business goals, delivers value, manages risk, and uses resources efficiently. Because of this broad scope, its primary focus is on controlling the entire IT function across the organization rather than just a specific area. Corporate governance refers to the whole organization and is broader than IT; IT security governance is only one facet of IT governance, focused on information security. Saying it covers all areas equally would overstate the scope. So the best fit is that it concentrates on controlling the entire IT function.