COBIT 2019 Framework: Introduction and Methodology

by ISACA

Over the years, best-practice frameworks have been developed and promoted to assist in the process of understanding, designing and implementing enterprise governance of IT (EGIT). COBIT 2019 builds on and integrates more than 25 years of development in this field, not only incorporating new insights from science, but also operationalizing these insights as practice. COBIT 2019 Introduction and Methodology updates COBIT principles while laying out the structure of the overall framework. New concepts are introduced and terminology is explained the COBIT Core Model and its 40 governance and management objectives provide the platform for establishing your governance program The performance management system is updated and allows the flexibility to use maturity measurements as well as capability measurements Introductions to design factors and focus areas offer additional practical guidance on flexible adoption of COBIT 2019, whether for specific projects or full implementation From its foundation in the IT audit community, COBIT has developed into a broader and more comprehensive information and technology (I&T) governance and management framework and continues to establish itself as a generally accepted framework for I&T governance. COBIT is a framework for the governance and management of enterprise information and technology, aimed at the whole enterprise. Enterprise I&T means all the technology and information processing the enterprise puts in place to achieve its goals, regardless of where this happens in the enterprise.

80 pages, Perfect Paperback

Published November 14, 2018

About the author

Information Systems Audit and Control Association

Reviews

[Dolf van der Haven · Rating 3 out of 5]

COBIT has been updated and in late 2018, COBIT 2019 was released. It has extended its model, although the difference with COBIT 5 is not huge.
As one of the many frameworks for governance and management of (IT) services, there are a few things that bother me about COBIT:
- The strict separation of Governance and Management is a misconception. It confines Governance to the board room, thus making it a mystical activity that the great majrity of the organization has nothing to do with. Instead, governance should be made operational and its activities (Evaluate, Direct, Monitor) be integrated with management responsibilities at every level in the organisation.
- The COBIT model excels in its endless lists of Enterprise Objectives, Design Factors, Enterprise Goals, etc. that feel very prescriptive, like a straight jacket of supposed best practice. A framework such as ITIL has clearly stepped away from being so prescriptive, and is therefore easier to adopt.
- References to other frameworks were already obsolete at the time of publishing (ISO/IEC 20000-1:2011) or were being revised (ITIL 2011). This is a missed opportunity for COBIT, which should really be corrected now that ISO/IEC 20000-1:2018 and ITIL 4 have been published.
- More guidance on COBIT's applicability tosmall and medium enterprises and Agile/DevOps environments should have been included. According to the footnotes, this is work in progress, similar to other aspects that are only briefle touched on. None of this has been published at the time I am writing this review (mid-2020).
Anyway, I'll go through the other three books to see if they can convince me to become a COBIT 2019 fan...

[David Steyer · Rating 3 out of 5]

It might just be me, but for the Introduction I was expecting more of an Introduction and reasoning. I do not have issues with other ISACA books, but COBIT seems to think you already know the reasons for adopting and does not go into great explanation and theory on how this helps your organization.

[Gabomur · Rating 3 out of 5]

Average, very unorganized and undidactical

[Ayabulela · Rating 3 out of 5]

Succinct and easy to understand although it could have been better organised.