Which framework aids in enforcing security protocols?

• A. DSS05 (Managed Security Services)
• B. APO14 (Managed Data)
• C. APO01 (Managed I&T Management Framework)
• D. EDM01 (Ensured Governance Framework Setting and Maintenance)

Answer: (C)

A formal IT management framework provides the structure needed to enforce security protocols across the organization. By standardizing policies, control objectives, risk management, roles, and processes, it creates a repeatable, auditable way to apply security measures throughout planning, operations, and governance. When security requirements are embedded in this framework, every function—from access control and network design to incident response and change management—follows the same rules, making enforcement consistent and scalable.

While security services and data governance are important, they cover narrower areas. Managed security services focus on operating security functions, data management concentrates on protecting and governing data assets, and governance framework maintenance ensures the governance context stays appropriate. The IT management framework, however, is what unifies and enforces security protocols across the entire IT environment.