COBIT

Stefan Coetzeecreated 2026-05-12updated 2026-06-082 min readMOC
Vault note, not reviewed against the source. Written in the knowledge vault on 2026-05-12 by models working with Stefan Coetzee and published as it stands, with private addresses, e-mail addresses and an employer name redacted. Check claims against the primary source before relying on them.

COBIT 2019 Cluster

Map of ISACA COBIT 2019 — IT governance framework. Governance vs management distinction. 40 governance and management objectives. Companion to ITIL (governance vs operations).

Anchors

Provenance

  • COBIT 1 (1996) — ISACA's IT audit framework.
  • COBIT 4.0 / 4.1 (2005 / 2007) — broader IT governance.
  • COBIT 5 (2012) — major restructure; governance vs management; enterprise IT.
  • COBIT 2019 — current. Renamed (dropped version number). Updated design factors, focus areas concept.

What COBIT is

Framework for IT governance and management. Distinguishes:

  • Governance (board-level): ensure stakeholder needs, conditions, options evaluated; direction set; performance measured.
  • Management (executive-level): plan, build, run, monitor activities aligned with governance direction.

40 governance and management objectives organized in five domains.

Five domains

  • EDM (Evaluate, Direct, Monitor) — governance domain, 5 objectives.
  • APO (Align, Plan, Organize) — management, 14 objectives.
  • BAI (Build, Acquire, Implement) — management, 11 objectives.
  • DSS (Deliver, Service, Support) — management, 6 objectives.
  • MEA (Monitor, Evaluate, Assess) — management, 4 objectives.

Per objective: practices, activities, work products, capability levels.

Detail in COBIT Governance and Management Objectives.

Design factors

COBIT 2019 introduced design factors for tailoring:

  • Enterprise strategy
  • Enterprise goals
  • Risk profile
  • I&T-related issues
  • Threat landscape
  • Compliance requirements
  • IT sourcing
  • IT implementation methods
  • Technology strategy
  • Enterprise size
  • Role of IT

Design factors produce tailored governance system.

Focus areas

COBIT 2019 publishes focus-area guides for specific topics:

  • Information security
  • DevOps
  • SMB
  • Risk
  • Information & technology risk
  • Digital transformation
  • Others

Focus areas extend COBIT for specific contexts.

COBIT vs ITIL

  • COBIT: IT governance — what should IT achieve.
  • ITIL: IT service management — how IT delivers services.
  • Complementary, not competing.
  • Many orgs use both.

Certification

ISACA certifications:

  • COBIT 2019 Foundation
  • COBIT 2019 Design and Implementation
  • Additional advanced certifications.

Also CRISC, CISM, CISA, CGEIT — broader ISACA certifications often combined.

Why this matters

  • IT governance vocabulary widely used.
  • Board-level IT oversight framing.
  • Combined with ITIL for full IT-operations coverage.
  • US enterprise + financial-services use.

See also

COBIT Cluster (pillars MOC) · position · anchors · ITIL Cluster