CISA Governance and Management of IT Practice Question
Which THREE of the following are components of the COBIT 2019 governance system?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Organizational structures
Options A, B, and C are correct because COBIT 2019 defines governance system components as Organizational Structures, Information Items, and Processes. Option D (Service desk) is an operational process not a governance component. Option E (Project management office) is a management structure, not a governance component as defined in COBIT 2019.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Organizational structures
Why this is correct
Organizational structures are a governance component.
- ✓
Information items
Why this is correct
Information items such as policies and procedures are governance components.
- ✓
Processes
Why this is correct
Processes are a key governance component in COBIT 2019.
- ✗
Service desk
Why it's wrong here
Service desk is an operational function, not a governance component.
- ✗
Project management office
Why it's wrong here
PMO is a management structure, not a governance component.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CISA question from scratch — 995 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on CISA
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. An organization is adopting COBIT 2019. Which TWO of the following are components of the governance system?
medium- ✓ A.Processes
- B.IT hardware inventory
- C.Information flows
- ✓ D.Organizational structures
- E.Employee satisfaction surveys
Why A: The correct answers are A (Processes) and D (Organizational structures). COBIT 2019 defines governance system components that include processes and organizational structures, among others. Processes describe the organized sets of practices, while organizational structures define roles and responsibilities. Option B (IT hardware inventory) is a resource or asset, not a component of the governance system. Option C (Information flows) is related to the Information component but is not a standalone component; information itself is a component, but flows are part of processes. Option E (Employee satisfaction surveys) is an HR activity, not a governance component.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.