Implementing COBIT 2019

By Sam Rivera, Founder, SentinelPanda · June 20, 2026 · 1 min read · COBIT 2019

You do not "install" COBIT — you improve toward it, one prioritised cycle at a time. The implementation guide is about change management as much as governance.

Improvement, not installation

COBIT 2019 is explicit that adopting it is a continual improvement journey, not a one-off implementation. Its implementation guidance frames governance improvement as an ongoing program with phases, recognising that you mature toward good governance rather than switching it on.

The phased approach

The implementation lifecycle runs through understanding what drives the need for governance improvement, assessing the current state, deciding where you want to be and prioritising, planning and building the improvements, executing them, and reviewing the results — then iterating. It is a recognisable continual-improvement loop applied to governance.

Change management matters

A large part of COBIT implementation guidance is about change management — governance improvement changes how people work and decide, and resistance is the main failure mode. Treating it as a pure process exercise rather than an organisational change is why governance initiatives stall.

Start small

Do not attempt all 40 objectives at once. Use design factors and the goals cascade to identify the few objectives where improvement matters most to your goals and risk, and start there. Demonstrating value on a focused scope builds the momentum to expand — the same discipline that works for any framework.