COBIT

owner Stefan Coetzeecreated 2026-05-12updated 2026-06-08not reviewed2 min readreference

Vault note, not reviewed against the source. Written in the knowledge vault on 2026-05-12 by models working with Stefan Coetzee and published as it stands, with private addresses, e-mail addresses and an employer name redacted. Check claims against the primary source before relying on them.

COBIT 2019 Cluster

Map of ISACA COBIT 2019 — IT governance framework. Governance vs management distinction. 40 governance and management objectives. Companion to ITIL (governance vs operations).

Anchors

position · anchors

Provenance

COBIT 1 (1996) — ISACA's IT audit framework.
COBIT 4.0 / 4.1 (2005 / 2007) — broader IT governance.
COBIT 5 (2012) — major restructure; governance vs management; enterprise IT.
COBIT 2019 — current. Renamed (dropped version number). Updated design factors, focus areas concept.

What COBIT is

Framework for IT governance and management. Distinguishes:

Governance (board-level): ensure stakeholder needs, conditions, options evaluated; direction set; performance measured.
Management (executive-level): plan, build, run, monitor activities aligned with governance direction.

40 governance and management objectives organized in five domains.

Five domains

EDM (Evaluate, Direct, Monitor) — governance domain, 5 objectives.
APO (Align, Plan, Organize) — management, 14 objectives.
BAI (Build, Acquire, Implement) — management, 11 objectives.
DSS (Deliver, Service, Support) — management, 6 objectives.
MEA (Monitor, Evaluate, Assess) — management, 4 objectives.

Per objective: practices, activities, work products, capability levels.

Detail in COBIT Governance and Management Objectives.

Design factors

COBIT 2019 introduced design factors for tailoring:

Enterprise strategy
Enterprise goals
Risk profile
I&T-related issues
Threat landscape
Compliance requirements
IT sourcing
IT implementation methods
Technology strategy
Enterprise size
Role of IT

Design factors produce tailored governance system.

Focus areas

COBIT 2019 publishes focus-area guides for specific topics:

Information security
DevOps
SMB
Risk
Information & technology risk
Digital transformation
Others

Focus areas extend COBIT for specific contexts.

COBIT vs ITIL

COBIT: IT governance — what should IT achieve.
ITIL: IT service management — how IT delivers services.
Complementary, not competing.
Many orgs use both.

Certification

ISACA certifications:

COBIT 2019 Foundation
COBIT 2019 Design and Implementation
Additional advanced certifications.

Also CRISC, CISM, CISA, CGEIT — broader ISACA certifications often combined.

Why this matters

IT governance vocabulary widely used.
Board-level IT oversight framing.
Combined with ITIL for full IT-operations coverage.
US enterprise + financial-services use.

ITIL — operations companion.
ISO 27001 — InfoSec management.
NIST CSF — cross-references with COBIT.