COBIT 2019 governance components
By Sam Rivera, Founder, SentinelPanda · June 20, 2026 · 1 min read · COBIT 2019
Components are COBIT's recognition that governance is not just process — it is also structures, culture, skills, and information working together.
Beyond process
A distinctive COBIT idea is governance components: the set of factors that, working together, achieve a governance or management objective. Crucially, COBIT recognises that process is only one component — structures, culture, and skills matter just as much. A perfect process executed by an unskilled team in a dysfunctional culture still fails.
The component types
- Processes — the activities and practices that produce outputs.
- Organisational structures — the decision-making bodies and roles.
- Policies and procedures, and principles.
- Information — the data and flows that governance needs.
- Culture, ethics and behaviour; people, skills and competencies; and services, infrastructure and applications.
Why it matters
Most control frameworks focus heavily on process. COBIT's component model is a reminder that governance is socio-technical — the right structures, the right skills, and the right culture are as load-bearing as the documented process. It is why a governance initiative that only writes procedures often fails.
Using components
For each priority objective, COBIT identifies the relevant components, giving you a fuller picture of what achieving it actually requires — not just "write a process" but "and assign the structure, build the skills, and shape the culture." It is governance with its eyes open.