COBIT 2019 Foundation

Module 1: Key Concepts and Terminology of COBIT 2019
• Structure and format of the COBIT 2019 framework
• Key stakeholders of COBIT 2019
• Business benefits provided by COBIT 2019

Module 2: Analysing the Six Governance Principles
• Benefits realization
• Risk and resource optimization
• Supporting the creation of business value through IT
• Transforming stakeholder needs into an enterprise's actionable strategy
• Clarifying the purpose of the goals cascade
• Translating high-level enterprise goals into specific IT-related goals
• Holistic approach
• Evaluating the key components of a governance system
• Dynamic governance system
• Creating a dynamic governance system
• Governance distinct from management
• Distinguishing between governance and management in an enterprise
• Relationships between governance and management
• Tailored to enterprise needs
• Using design factors to produce an enterprise-specific governance system
• Using COBIT variants to tailor for a specific purpose or context
• End-to-end governance system
• A framework for business and IT leaders
• Interrelating key roles and activities

Module 3: Analyzing the Three Governance Framework Principles
• Identifying key components
• Relationships between key components
• Maximising consistency and allowing automation
• Updating content
• Addressing new issues
• Maintaining integrity and consistency
• Alignment between COBIT and related standards, frameworks and
regulations

Module 4: The Governance System and Components• COBIT 2019 Core Model
• The forty governance and management objectives
• The five-domain structure
• Principles, policies, procedures
• Meeting good practice requirements for the scope, compliance, exceptions
and monitoring
• Differentiating policies, principles and procedures
• Processes
• Reviewing the key characteristics of the process goal categories
• Organizational structures
• Implementing practices for operations, responsibility delegation and decisionmaking
• The key responsibilities of key organizational roles
• Culture, ethics and behavior
• Creating, encouraging and maintaining desired behaviors
• Relating organizational and individual ethics with goals
• Information
• Reviewing the information quality categories
• Interrelating the five steps of the information cycle with the information
enablers
• Applying information attributes to layers
• Assessing context and quality of information to the user with key attributes
• Services, infrastructure and applications
• Analyzing the five architecture principles that govern the use of IT-related
resources
• Relationship with the other enablers
• People, skills and competencies
• Defining skill requirements for each role
• Mapping the skill categories to the process domains
• Skill categories in relation to the process domains

Module 5: Performance Management with COBIT 2019
• Performance Management Principles
• Simple to understand and use
• Consistent with conceptual model
• Providing reliable, repeatable, relevant results
• Flexible to suit different organizations
• Supporting multiple assessment types
• Managing performance of processes
• CMMI-based process capability scheme
• The six process capability levels
• Focus area maturity levels

Module 6: Designing and implementing a tailored governance system
• The design process
• Understanding the need for tailoring
• Using design factors and variants
• Stages and steps in the design process
• The relationship between design and implementation
• The COBIT 2019 seven-phase implementation approach
• What are the drivers?
• Where are we now?
• Where do we want to be?
• What needs to be done?
• How do we get there?
• Did we get there?
• How do we keep the momentum going?

• Understand the COBIT 2019 Framework
• Understand the Principles underlying COBIT 2019
• Performance Management
• Design a Tailored Governance System
• Manage performance using COBIT 2019
• Design a tailored governance system
• Understand and use COBIT 2019’s goals cascade
• Implement COBIT 2019 using a seven-stage model

COBIT 2019 Foundation is aimed at organizations of all sizes and all sectors. It is ideal for professionals involved in assurance, security, risk, privacy/compliance and business leaders and stakeholders involved in or affected by governance and management of information and IT systems, such as: IT Manager, IT Quality Professionals, IT Auditors, IT Consultants, IT Developers, IT Operational Management, ΙT Business Leadership Management.