COBIT 2019 BAI domain (Build, Acquire, Implement)

By Sam Rivera, Founder, SentinelPanda · June 20, 2026 · 1 min read · COBIT 2019

BAI is where COBIT's plans become real systems — programs, projects, changes, and the discipline of implementing them without breaking what works.

The delivery domain

BAI — Build, Acquire and Implement — is the management domain that turns plans into working reality. Where APO plans and organises, BAI builds: managing the programs, projects, and changes that deliver and modify IT solutions. It is the execution arm between planning and operations.

What it covers

BAI objectives span program and project management, requirements definition, identifying and building solutions, availability and capacity, organisational change enablement, change management (IT changes), acceptance and transitioning, knowledge, assets, and configuration. It is the discipline of delivering change well.

Change management lives here

A key BAI concern is managing changes to the IT environment in a controlled way — the governance counterpart to the change-management control that appears in SOC 2 and ISO 27001. COBIT frames it as part of building and implementing, with the same goal: change without breaking what works.

From plan to run

BAI sits between APO (which decides what to build) and DSS (which runs what BAI delivered). A strong BAI domain means projects deliver and changes land safely; a weak one means good plans that never become working systems, or changes that cause outages.