COBIT 2019 governance maturity assessment
Run a COBIT 2019 governance and management capability assessment — 40 objectives across the five domains, with a Process Capability rating and a maturity report.
Starter is free · Professional $890/mo · see pricing
What COBIT 2019 requires
COBIT 2019 is ISACA’s framework for the governance and management of enterprise information and technology. It separates governance from management and organizes 40 objectives across five domains — EDM (Evaluate, Direct, Monitor), APO, BAI, DSS, and MEA — each rated on a CMMI-style Process Capability scale, and tailored to your context through design factors.
Forty objectives across five domains — governance and management
COBIT 2019’s key distinction is between governance (the EDM domain — evaluate, direct, monitor, owned by the board) and management (APO, BAI, DSS, MEA — plan, build, run, monitor). SentinelPanda’s library covers all 40 governance and management objectives so you can assess the board’s oversight and the IT organization’s execution in the same workspace, and roll results up by domain.
Process-capability ratings and design factors
Each objective is rated on a CMMI-style Process Capability scale from 0 (incomplete) to 5 (optimizing), giving you a defensible, comparable maturity baseline rather than a subjective red/amber/green. SentinelPanda rolls those ratings into a per-domain maturity report and a governance maturity PDF, and lets you tailor the assessment using COBIT’s design factors so the result reflects your enterprise strategy, risk profile, and threat landscape.
How SentinelPanda helps
COBIT 2019 — frequently asked questions
Does SentinelPanda support COBIT 2019 capability ratings?
Yes — each of the 40 objectives is rated on the CMMI-style Process Capability scale (0–5), rolled up per domain into a governance maturity report.
Is COBIT 2019 a certification?
No — COBIT is a governance framework, not a certifiable standard. SentinelPanda produces a capability/maturity baseline and report you can use for board reporting and improvement planning.
What’s the difference between governance and management in COBIT?
Governance (the EDM domain) is the board evaluating, directing, and monitoring; management (APO, BAI, DSS, MEA) plans, builds, runs, and monitors. COBIT 2019 assesses them separately, and so does SentinelPanda.
Can COBIT results draw on our other frameworks?
Yes — cross-framework mapping links COBIT objectives to related ISO, NIST, PCI, and SOC 2 controls, so existing evidence informs the capability assessment.