COBIT 2019 Design and Implementation

Compliance requirements are the primary regulatory design factor because they establish the mandatory laws, regulations, supervisory expectations, reporting duties, and control obligations that governance must satisfy. Strategy, risk treatment, and budget affect the governance approach, but they do not replace the requirement to comply with applicable regulations.