COBIT 2019 Framework — Governance and Management Objectives

ISACA framework for enterprise IT governance and management covering 40 objectives across alignment, delivery, risk, and resource optimisation. Applies to organisations managing enterprise IT.

COBIT 2019 applies to all enterprises regardless of size or industry, IT governance and management functions, boards of directors and governing bodies, IT management and operations teams, internal audit and assurance functions.

AuditDSS has decomposed COBIT 2019 into 263 atomic obligations from 5 rules. Each obligation is independently testable and risk-scored.

The key requirements include: 40 governance and management objectives across 5 domains, EDM: Evaluate, Direct and Monitor (5 governance objectives), APO: Align, Plan and Organize (14 management objectives), BAI: Build, Acquire and Implement (11 management objectives), DSS: Deliver, Service and Support (6 management objectives), MEA: Monitor, Evaluate and Assess (4 management objectives), management practices for each objective, capability levels and process assessment.

Upload your compliance policy to AuditDSS. The platform maps your document against all 263 COBIT 2019 obligations using deterministic AI scoring — not checklists or LLM summaries. You get a risk-scored gap analysis showing exactly which obligations are covered, partially covered, or missing.

COBIT 2019 is enforced in International by Information Systems Audit and Control Association.

COBIT 2019 became effective on April 1, 2019.

COBIT 2019 is primarily relevant to the Medical Devices & Diagnostics industry. AuditDSS covers 64 regulations in this industry sector.