Which IT governance framework emphasizes value delivery, risk optimization, resource management, and performance measurement?

• A. COBIT 2019
• B. ISO/IEC 38500
• C. ITIL
• D. NIST SP 800-53

Answer: (A)

The main idea being tested is which IT governance framework is built to ensure value is delivered while optimizing risk, managing resources, and measuring performance across the enterprise.

COBIT 2019 is designed precisely for governing enterprise IT to deliver value to stakeholders. It emphasizes aligning IT with business goals, optimizing risk, efficiently using IT resources, and continuously measuring performance through a structured set of governance objectives, a clear goals cascade, and a process-oriented model. This combination makes it the best fit for balancing value, risk, resources, and performance in IT governance.

ISO/IEC 38500 focuses on high-level principles for the governance of IT by the board and senior management, not on the detailed process-oriented governance and performance measurement framework that COBIT provides. ITIL centers on IT service management and the lifecycle of services, which improves consistency and quality of IT services rather than governing IT as a whole. NIST SP 800-53 offers a catalog of security and privacy controls for risk management, especially in federal contexts, rather than a comprehensive governance framework aimed at value delivery and performance measurement.