← All insights

COBIT 2019: the IT governance framework, decoded

Somewhere between the board asking 'is IT under control?' and engineers shipping code sits governance — and COBIT is the framework that formalises it. ISACA's COBIT 2019 defines how enterprises direct and monitor technology so it creates value at acceptable risk.

The framework organises 40 governance and management objectives, from strategy and risk through delivery and support, each with maturity metrics. Crucially, COBIT does not replace ITIL, TOGAF or agile methods; it sits above them, answering how much and how well rather than how.

Foundation certification teaches the model, design factors and principles — the vocabulary of audit findings and governance committees. Design and Implementation levels certify those who tailor governance systems to a specific enterprise.

The natural audience: IT auditors, risk managers, governance officers and senior IT managers facing King IV expectations of technology oversight, which South African boards take seriously.

When the audit committee asks pointed questions, COBIT fluency is the difference between defensiveness and a maturity roadmap.