Regarding COBIT, which of the following statements is true?
a) COBIT means Cost Objectives for Information and Related Technology
b) COBIT rejects the definition of internal control from the COSO report
c) COBIT states that a company’s management should play a minor role in establishing an internal control system
d) COBIT classifies people as one of the primary resources managed by various IT processes
To determine which statement about COBIT is true, we can analyze each option and identify the correct one:
a) COBIT does not stand for "Cost Objectives for Information and Related Technology." The correct expansion of COBIT is "Control Objectives for Information and Related Technology." Therefore, statement (a) is false.
b) COBIT does not reject the definition of internal control from the COSO (Committee of Sponsoring Organizations of the Treadway Commission) report. In fact, COBIT is often used in conjunction with COSO's internal control framework to provide guidance on IT-related controls. Therefore, statement (b) is false.
c) COBIT does not state that a company's management should play a minor role in establishing an internal control system. On the contrary, COBIT emphasizes the importance of management's involvement in establishing and maintaining effective internal controls. Therefore, statement (c) is false.
d) COBIT does classify people as one of the primary resources managed by various IT processes. COBIT recognizes that people, along with other resources such as applications, information, and infrastructure, are critical components of IT governance and management. Therefore, statement (d) is true.
In conclusion, the correct statement regarding COBIT is:
d) COBIT classifies people as one of the primary resources managed by various IT processes.