COBIT 2019 vs COBIT 5: what changed

By Sam Rivera, Founder, SentinelPanda · June 20, 2026 · 1 min read · COBIT 2019

COBIT 2019 is an evolution of COBIT 5, not a revolution — but design factors and focus areas made it genuinely more tailorable.

Evolution, not rewrite

COBIT 2019 is the successor to COBIT 5, and the two share most of their conceptual foundation. If you know COBIT 5, COBIT 2019 will be familiar — the changes refine and extend rather than replace. The governance/management split, the goals cascade, and the component idea all carry over.

The main additions

• Design factors: a structured way to tailor COBIT to your enterprise context — arguably the headline change.
• Focus areas: tailored views for specific topics (security, DevOps, cloud).
• More objectives: the processes/objectives were updated and expanded (to 40 governance/management objectives).
• Refreshed terminology and a more open, regularly-updated model.

Tailoring is the big shift

The most consequential practical change is design factors. COBIT 5 could feel like a large generic model; COBIT 2019's design factors make tailoring to your size, risk, threat landscape, and strategy a built-in step. It turns "here is everything" into "here is what matters for you," which is how the framework should be used.

Moving between versions

For organisations on COBIT 5, the move to 2019 is mostly additive — adopt design factors to tailor, use focus areas where relevant, and map to the updated objectives. The investment in COBIT 5 largely carries forward.