Main Difference Between Policies and Principles in COBIT 5

A.

According to COBIT 5, policies and principles are both important components of an enterprise's governance and management of IT. However, there is a key difference between the two.

Policies are specific rules or guidelines that provide detailed guidance to influence decision making in the enterprise. They typically outline the expectations and behaviors that individuals and groups should follow in order to comply with organizational standards, regulatory requirements, and other relevant laws. Policies are often developed in response to a specific business need or objective, and they may be updated or revised as circumstances change.

On the other hand, principles express the core values and beliefs of the enterprise, and are designed to guide decision making in a more general sense. They are intended to achieve the stated purpose or goals of the enterprise, and to provide a framework for the development of policies and procedures. Principles may include statements about ethical behavior, customer service, innovation, or other areas that are important to the enterprise's success. Unlike policies, principles are generally not as prescriptive or specific, and they are not typically updated or revised as frequently.

Therefore, the statement that describes the main difference between policies and principles, as stated by COBIT 5, is option B: "Policies express detailed guidance to influence decision making, while principles express the core values of the enterprise."