{"id":1528,"date":"2024-09-19T16:26:46","date_gmt":"2024-09-19T16:26:46","guid":{"rendered":"https:\/\/itlawco.com\/?p=1528"},"modified":"2024-10-20T19:06:13","modified_gmt":"2024-10-20T19:06:13","slug":"cobit-2019-it-governance-framework","status":"publish","type":"post","link":"https:\/\/itlawco.com\/fr\/cobit-2019-it-governance-framework\/","title":{"rendered":"COBIT 2019: IT governance framework"},"content":{"rendered":"
<\/div><\/div><\/div>
\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\n
\n\t

COBIT 2019, developed by ISACA<\/a> (an international professional association focused on IT governance), is the latest version of the globally recognised IT governance framework designed to help organisations align IT strategies with business goals. It offers a flexible and holistic approach to managing IT, ensuring value creation, risk management, and resource optimisation. This post tells you what you need to know about COBIT 2019 and how it can benefit your business.<\/p>\n

What is COBIT 2019?<\/h2>\n

COBIT stands for \u201cControl Objectives for Information and Related Technologies\u201d. It\u2019s a comprehensive framework that provides organisations with practices, tools, and guidelines to govern and manage IT effectively. COBIT 2019 enables organisations to align IT and business strategies, optimising IT investments while mitigating risks.<\/p>\n

Key aspects of COBIT 2019<\/h2>\n

Holistic governance approach<\/h3>\n

COBIT 2019 is designed to create a governance system that spans the entire enterprise. Whether your business is large or small, it provides a customisable framework to meet your specific IT governance needs.<\/p>\n

Governance components<\/h3>\n

COBIT 2019 is structured around six key governance components:<\/p>\n

    \n
  1. Processes<\/strong>: activities and practices required to achieve specific IT goals.<\/li>\n
  2. Organisational structures<\/strong>: decision-making bodies in governance.<\/li>\n
  3. Principles, policies, and frameworks<\/strong>: guidelines to align IT with business.<\/li>\n
  4. Information flows and items<\/strong>: essential data for governance.<\/li>\n
  5. Culture, ethics, and behaviour<\/strong>: how individual and group behaviour impacts governance.<\/li>\n
  6. People, skills, and competencies<\/strong>: human resources critical to achieving governance objectives.<\/li>\n<\/ol>\n

    Governance and management objectives<\/h3>\n

    COBIT 2019 introduces 40 governance and management objectives split into five domains:<\/p>\n

      \n
    1. EDM (evaluate, direct, monitor)<\/strong>: overseeing IT strategy and ensuring it aligns with business objectives.<\/li>\n
    2. APO (align, plan, organise)<\/strong>: planning and organising IT initiatives and resources to align with business strategies.<\/li>\n
    3. BAI (build, acquire, implement)<\/strong>: managing the development, acquisition, and implementation of IT systems.<\/li>\n
    4. DSS (deliver, service, support)<\/strong>: handling the daily operations and service management of IT systems.<\/li>\n
    5. MEA (monitor, evaluate, assess)<\/strong>: monitoring and evaluating IT performance and ensuring compliance with external and internal requirements.<\/li>\n<\/ol>\n

      Tailoring to organisational needs with design factors<\/h3>\n

      COBIT 2019 emphasises flexibility, allowing organisations to tailor the framework based on specific needs using 11 design factors:<\/p>\n

        \n
      1. Enterprise strategy<\/li>\n
      2. Risk profile<\/li>\n
      3. Compliance requirements<\/li>\n
      4. Threat landscape<\/li>\n
      5. Technology adoption strategy<\/li>\n
      6. Enterprise size<\/li>\n
      7. Industry sector<\/li>\n
      8. Role of IT<\/li>\n
      9. Sourcing model for IT<\/li>\n
      10. Implementation methods<\/li>\n
      11. Future IT architecture<\/li>\n<\/ol>\n

        These factors ensure that organisations can prioritise their governance and management objectives in line with their unique requirements.<\/p>\n

        Focus areas<\/h3>\n

        COBIT 2019 introduces the concept of focus areas\u2014specialised themes within IT governance that address specific concerns or emerging technologies:<\/p>\n