COBIT 2019 Design and Implementation

COBIT 2019 uses this mapping to identify the governance and management objectives that act as controls for each IT risk scenario and to indicate their relative importance in mitigating that scenario. It does not assign risk-appetite scores or risk-tolerance levels to objectives.