INTRODUCING
EXECUTIVE SUMMARY
© 2018 ISACA. All rights reserved.
COBIT® 2019
The globally recognized COBIT Framework, which helps ensure effective
enterprise governance of information and technology, has been updated with new
information and guidance, facilitating easier, tailored implementation—
strengthening COBIT’s continuing role as an important driver of innovation and
business transformation. This document sets the scene for the upcoming release
of COBIT® 2019 guidance.
© 2018 ISACA. All rights reserved.
Remembering John Lainhart
• In dedication to John Lainhart, who was
there from COBIT day -1 in 1995 until his
passing in September 2018.
• John was the relentless support behind
many COBIT related projects, including
COBIT 2019 .
• ISACA is extremely grateful for John and
his vision, and COBIT 2019 (and its
progeny) are his legacy.
© 2018 ISACA. All rights reserved.
INTRODUCTION
ENTERPRISE GOVERNANCE OF INFORMATION &
TECHNOLOGY (EGIT) AND THE NATURE OF COBIT
© 2018 ISACA. All rights reserved.
INTRODUCTION
ENTERPRISE GOVERNANCE OF INFORMATION AND TECHNOLOGY (EGIT)
In the light of digital transformation, information and technology (I&T)
have become crucial in the support, sustainability and growth of
enterprises.
• Previously, governing boards and senior management could delegate, ignore or
avoid I&T-related decisions
• In most sectors and industries, such attitudes are now ill advised
• Digitized enterprises are increasingly dependent on I&T for survival and growth
• Stakeholder value creation is often driven by a high degree of digitization in new
business models, efficient processes, successful innovation, etc.
© 2018 ISACA. All rights reserved.
INTRODUCTION
ENTERPRISE GOVERNANCE OF INFORMATION AND TECHNOLOGY (EGIT)
Given the centrality of I&T for enterprise risk management and value
generation, a specific focus on enterprise governance of information
and technology (EGIT) has arisen over the last two decades.
EGIT is an integral part of corporate governance
• Exercised by the board that oversees the definition and implementation of
processes, structures and relational mechanisms
• Enables both business and IT people to execute their responsibilities in support
of business/IT alignment
• Enables creation of business value from I&T-enabled business investments
© 2018 ISACA. All rights reserved.
INTRODUCTION
ENTERPRISE GOVERNANCE OF INFORMATION AND TECHNOLOGY (EGIT)
Benefits
Fundamentally, EGIT is concerned with value Realization
delivery from digital transformation and the
mitigation of business risk that results from
digital transformation.
Risk
More specifically, three main outcomes can be Optimization
expected after successful adoption of EGIT.
Resource
Optimization
© 2018 ISACA. All rights reserved.
INTRODUCTION
COBIT AS AN INFORMATION & TECHNOLOGY (I&T) FRAMEWORK
COBIT is a framework for the governance and management of
enterprise information and technology, aimed at the whole enterprise.
• Enterprise I&T means all the technology and information processing the
enterprise puts in place to achieve its goals, regardless of where this
happens in the enterprise
• Enterprise I&T is not limited to the IT department of an organization, but
certainly includes it
© 2018 ISACA. All rights reserved.
INTRODUCTION
GOVERNANCE AND MANAGEMENT DEFINED
• Ensure stakeholder needs, conditions
and options are evaluated to determine
enterprise objectives
• Ensure direction is set through
Governance prioritization and decision making
(Board Level)
• Ensure performance and compliance are
monitored against objectives
• Plans, builds, runs and monitors
activities, in alignment with the direction
Management set by the governance body, to achieve
(Executive Level) the enterprise objectives
© 2018 ISACA. All rights reserved.
INTRODUCTION
WHAT IS COBIT AND WHAT IT IS NOT: SETTING THE RIGHT EXPECTATIONS
COBIT IS COBIT IS NOT
• A framework for the governance and • A full description of the whole IT
management of enterprise I&T environment of an enterprise
• COBIT defines the components to build • A framework to organize business
and sustain a governance system processes
• An (IT-) technical framework to manage
• COBIT defines the design factors that
all technology
should be considered by the enterprise
• COBIT does not make or prescribe any
to build a best fit governance system
IT-related decisions
• COBIT is flexible and allows guidance
on new topics to be added
© 2018 ISACA. All rights reserved.
APPENDIX
© 2018 ISACA. All rights reserved.
ABOUT ISACA
Nearing its 50th year, ISACA® (isaca.org) is a global association helping individuals
and enterprises achieve the positive potential of technology. Today’s world is
powered by technology, and ISACA equips professionals with the knowledge,
credentials, education and community to advance their careers and transform their
organizations.
ISACA leverages the expertise of its 450,000 engaged professionals in information
and cyber security, governance, assurance, risk and innovation, as well as its
enterprise performance subsidiary, CMMI® Institute, to help advance innovation
through technology. ISACA has a presence in 188 countries, including 217 chapters
worldwide and offices in both the United States and China.
© 2018 ISACA. All rights reserved.
