COBIT 2019 Design and Implementation

The board of directors, as the enterprise governing body, is accountable for governance oversight, including monitoring whether an EGIT implementation achieves its success metrics and directing changes to long-term targets based on results. Management roles execute and manage the plan, while internal audit provides independent assurance. ISACA’s COBIT guidance describes governance as the responsibility to evaluate, direct, and monitor.