Which statement describes COBIT's scope?

• A. Corporate governance
• B. Controlling entire IT function
• C. IT security governance
• D. All of the above about equally

Answer: (B)

COBIT covers governance and management of the entire IT function across the organization. It isn’t aimed at corporate governance as a whole, which spans the entire business beyond IT, and it isn’t limited to IT security governance, which is only one aspect. The framework aims to oversee all IT processes, resources, and information to ensure they align with business goals and deliver value while managing risk and compliance. That broad, integrative scope is captured by describing COBIT as controlling the entire IT function, making it the best fit.