According to the COBIT 2019 Design Guide, when designing an IT governance system, the next step after considering the enterprise's strategic business objectives is to assess the enterprise's risk profile. The enterprise's risk profile reflects the level of risk exposure and appetite that the organization is willing to accept in pursuit of its objectives. The risk profile also influences the selection of governance objectives, components and practices that are appropriate for managing IT-related risks.1, p. 18-19 References: 1: COBIT
2019 Design Guide: Designing an Information and Technology Governance Solution

As explained in the previous question, the success metrics for the EGIT continual improvement program are identified and defined in the third stage of the EGIT implementation life cycle, which is developing the EGIT implementation program plan. Therefore, the correct answer is D. The other options are incorrect because they refer to different stages of the EGIT implementation life cycle that do not involve defining the success metrics. Option A refers to the second stage, which is defining the EGIT implementation road map. This stage involves identifying and prioritizing the improvement opportunities based on a gap analysis between the current and desired states of EGIT. Option B refers to the fourth stage, which is executing the EGIT implementation program plan. This stage involves implementing the improvement actions according to the plan, monitoring and controlling the progress and outcomes, and reporting on the results. Option C refers to the first stage, which is initiating an EGIT program. This stage involves establishing a clear vision and scope for the EGIT program, obtaining senior management commitment and sponsorship, and setting up a governance structure for the program. References: : COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 28 1 : COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 43 1 : COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 24

An important component for an enterprise strategy archetype of cost leadership as defined by COBIT 2019 is support for the portfolio management role with an investment office. According to the COBIT 2019 Design Guide, cost leadership is one of the four generic enterprise strategy archetypes that describe how enterprises compete in their markets. Cost leadership means that an enterprise aims to offer the lowest prices for its products or services by minimizing its costs and maximizing its efficiency. One of the design factors that influence the governance system for a cost leadership strategy is the organizational structures. The COBIT
2019 Design Guide suggests that a cost leadership strategy requires a centralized and standardized organizational structure that supports the portfolio management role with an investment office. The portfolio management role is responsible for selecting, prioritizing, and balancing the IT investments that align with the enterprise strategy and objectives. The investment office is a function that assists the portfolio management role by providing financial analysis, reporting, and decision support. The support for the portfolio management role with an investment office helps to ensure that the IT investments are optimized for cost and value. References: : COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 48 2 : COBIT 2019 Design Guide: Designing an Information & Technology Governance Solution, page 51

The strategy archetype is a design factor that describes how an enterprise uses information and technology to achieve its goals and objectives. There are six strategy archetypes defined in COBIT 2019: customer intimacy, product leadership, operational excellence, compliance-driven, data-driven, and innovation-driven.
Each archetype has different implications for the governance and management of information and technology in terms of focus areas, processes, practices, roles, structures, and metrics. The best approach when determining which strategy archetype most closely aligns with an enterprise's own strategy is to select the one that reflects the enterprise's information and technology risk profile, which is another design factor that describes how an enterprise identifies, assesses, responds to, monitors, and reports on information and technology risks. The risk profile helps to determine the level of risk appetite and tolerance that an enterprise has for its information and technology activities, as well as the level of control and assurance that is required for its governance framework. By selecting the strategy archetype that matches the risk profile, an enterprise can ensure that its governance framework is appropriate for its context and objectives5 References: 5: COBIT
2019 Design Guide, page 35-39 : COBIT 2019 Design Guide, page 41-43

The change enablement tasks are the tasks that involve preparing for managing and sustaining the changes that are required for implementing a governance system for an enterprise using COBIT 2019. The change enablement tasks help to ensure that the changes are aligned with the enterprise's strategy objectives needs expectations etc., that they deliver value and benefits to the enterprise and its stakeholders that they overcome resistance and barriers to change that they create a culture of continuous improvement etc. One of the key change enablement tasks that must be completed during the driver identification phase of an IT initiative is identify the business and governance drivers. The driver identification phase is the first phase of the governance implementation roadmap which involves identifying and analyzing the internal and external factors that trigger or influence the need for designing and implementing a governance system for an enterprise using COBIT 2019. The business drivers are the factors that relate to the enterprise's business strategy objectives performance risks issues opportunities etc., such as market conditions customer demands competitive pressures regulatory requirements etc. The governance drivers are the factors that relate to the enterprise's information and technology governance strategy objectives performance risks issues opportunities etc., such as IT alignment IT value delivery IT risk management IT resource management IT performance measurement etc. By identifying the business and governance drivers during the driver identification phase an enterprise can establish a clear understanding of why it needs to design and implement a governance system using COBIT 2019 what are the expected outcomes benefits value etc., from doing so who are the relevant stakeholders their roles responsibilities requirements expectations etc., how to communicate engage involve them in the change process etc.