Skip to content

COBIT

What is COBIT?

Control Objectives for Information and Related Technologies, an IT governance framework by ISACA. COBIT 2019 provides 40 governance and management objectives across five domains.

Governance

Related terms

ITIL

Frameworks that govern cobit

COBIT 2019View framework →ISO 27001:2022View framework →

What the standards actually require on cobit

Requirements naming cobit across 4 standards, quoted from the control text.

FFIEC IT Examination Handbook1 control

Management implements controls aligned with the institution's operations and strategy that, based on the risk assessment, include patch management, asset and configuration management, vulnerability scanning and penetration testing, endpoint security, resilienc...

ffiec-it-examination-handbook::IS-II.C.4 · II.C.4 Control Implementation (Information Security) →
IRS Publication 10751 control

Coordination positions IRS Pub 1075 within the broader US federal + state + and industry security landscape. (1) NIST Standards: NIST SP 800-53 Rev 5 (primary control set incorporated by reference Section 9.3) + NIST SP 800-53A (assessment methodology) + NIST...

IRSPub1075-CoordNIST80053-FedRAMP-FISMA-CJIS-SSACDS-StateRevAgencies-PrivacyAct-SOC2-Industry · IRS Pub 1075 Coordination - NIST SP 800-53 Rev 5 + FedRAMP + FISMA + 26 USC 6103 + FBI CJIS + SSA CDS + State Revenue Agencies + Privacy Act + SOC 2 + Industry Frameworks + Federal Sectoral →
Nevada Gaming Control Board Cybersecurity Requirements1 control

A covered entity must perform an initial risk assessment of its business operation and develop the cybersecurity best practices it deems appropriate, then monitor and evaluate cybersecurity risks to the operation on an ongoing basis and modify its best practic...

nevada-gaming-control-board-cybersecurity-requirements::5.260(3) · 5.260(3) Initial risk assessment, cybersecurity best practices and ongoing monitoring, within 90 days of licensing →
SOX 404 / ICFR1 control

Per SOX 404 + COBIT: ITGC including access management + change management + computer operations + program development + backup + recovery.

SOX404-4 · IT General Controls (ITGC) - Access, Change, Operations →

Questions people ask about cobit

What is COBIT?
Control Objectives for Information and Related Technologies, an IT governance framework by ISACA. COBIT 2019 provides 40 governance and management objectives across five domains.
Why is COBIT important for compliance?
COBIT is a key concept in Governance. Understanding cobit helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
What concepts are related to COBIT?
Key concepts related to COBIT include ITIL. Understanding these interconnected concepts provides a more comprehensive view of Governance requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address COBIT?
COBIT appears in the requirement text of FFIEC IT Examination Handbook, IRS Publication 1075, Nevada Gaming Control Board Cybersecurity Requirements, SOX 404 / ICFR. Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about COBIT?
Explore our compliance framework pages to see how cobit applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how COBIT applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.