COBIT 2019

A culture, ethics, and behavior component begins by defining the behaviors that are desired and those that are unacceptable. Those definitions provide the baseline for communication, incentives, enforcement, and later compliance assessment. ISACA describes this component as guidance on desired cultural elements that support governance or management objectives.