ISC: S1 M5

COBIT 2019 Framework

Foundation of COBIT 2019

• COBIT 5

• Governance system principles

• Governance framework principles

• Other standards and regulations

• Community contribution

Governance System Principles

1. Value (stakeholder value)

2. Holistic approach

3. Dynamic systems governance

4. Governance distinct from management

5. Tailored to enterprise needs

6. End-to-End governance system

Governance Framework Principles

1. Based on a conceptual model

2. Open and flexible

3. Aligned to major standards

Governance Objectives

Evaluate, direct, and monitor

Management Objectives

1. Align, plan, organize

2. Build, acquire, implement

3. Deliver, service, support

4. Monitor, evaluate, assess

Evaluate, Direct, and Monitor (EDM)

Evaluation, management, and monitoring of strategic objectives

Align, Plan, and Organize (APO)

Information technology strategy, organization, and supporting activities

Build, Acquire, and Implement (BAI)

Implementation of IT solutions in business processes

Delivery, Service, and Support (DSS)

Security, delivery, and support of IT services

Monitor, Evaluate, and Assess (MEA)

IT conformance to company performance targets, control objectives, and external requirements

Governance System Components

1. Processes

2. Organizational structure

3. Principles, policies, and frameworks

4. Information

5. Culture, ethics, and behavior

6. People, skills, and competencies

7. Services, infrastructure, and applications

COBIT Design Factors

• Enterprise size, strategy, and goals

• Risk profile

• IT issues and implementation methods

• Threat landscape

• Compliance requirements

• Role and sourcing model of IT

• Technology adoption Strategy

COBIT Core Publications

• COBIT 2019 Framework (Intro)

• COBIT 2019 Framework (Governance and Management)

• COBIT 2019 Design Guide

• COBIT 2019 Implementation Guide