COBIT 2019 Governance System Design for Corporate Boards Training Course

Course overview

Corporate boards are expected to demonstrate effective oversight of strategy, risk, technology, compliance, resilience and organisational performance, yet many receive fragmented reporting and operate without an explicit governance design. Directors, company secretaries and senior executives need a defensible way to define decision rights, establish oversight mechanisms and show how governance responds to enterprise priorities. This course uses COBIT 2019 to turn broad board responsibilities into a structured, evidence-based governance system design.

Participants learn how COBIT 2019 distinguishes governance from management; how its governance and management objectives support board oversight; and how to use the COBIT design factors to tailor a system rather than adopt a generic control framework. They assess enterprise strategy, risk profile, threat landscape, regulatory obligations, sourcing model and technology adoption, then translate these inputs into priority objectives, governance components, metrics and reporting requirements. The course also addresses board-level decision structures, policy frameworks, assurance arrangements and escalation routes.

Instruction combines focused teaching with a running corporate case study and guided design workshops. Working in teams, participants apply the COBIT 2019 Design Toolkit to develop a governance system design for a board facing growth, cyber risk, regulatory scrutiny and outsourced technology services. Each participant leaves with a completed governance design pack: design-factor assessment, prioritised COBIT objectives, draft governance structure, board information requirements, performance measures and a practical implementation roadmap for use in their own organisation.

The programme is suited to governance professionals and senior leaders who work with boards or board committees, as well as directors who need a practical framework for asking better oversight questions and commissioning measurable governance improvements.

Course objectives

By the end of this course, participants will be able to:

• Assess enterprise context using the COBIT 2019 design factors, including strategy, risk profile, threat landscape and sourcing model
• Differentiate board governance responsibilities from executive management responsibilities using the COBIT governance system model
• Prioritise COBIT 2019 governance and management objectives against documented enterprise goals and stakeholder needs
• Design decision rights, committee mandates and escalation paths for board-level technology and risk oversight
• Map governance components including processes, organisational structures, policies, information flows and culture requirements
• Define board dashboards, goal cascade measures and key performance indicators for governance monitoring
• Evaluate governance capability gaps using COBIT performance management concepts and target capability levels
• Produce a tailored COBIT 2019 governance system design pack and phased implementation roadmap

Benefits of attending

Target competencies

Who should attend

• Board Directors and Non-Executive Directors — who need a structured basis for overseeing technology, risk, resilience and enterprise value
• Corporate Governance Managers — who design governance frameworks, committee structures and board reporting arrangements
• Company Secretaries — who support board effectiveness and must document clear authorities, mandates and decision processes
• Chief Risk Officers and Risk Managers — who need to connect enterprise risk oversight with governance objectives and assurance
• CIOs, CISOs and Digital Leaders — who must provide boards with relevant, measurable information on technology performance and risk
• Internal Audit and Assurance Leaders — who assess whether governance arrangements are designed and operating effectively

Requirements and prerequisites

This is a foundation-to-intermediate course. Participants should be comfortable discussing board responsibilities, enterprise risk, internal controls and organisational decision-making. Familiarity with their organisation’s strategy, committee structure, risk register, technology landscape or board reporting will make the workshops more valuable. Prior COBIT experience is helpful but not required; the course introduces the COBIT 2019 principles, governance system components, objectives and design factors from first principles. No technical configuration skills, audit certification, programming ability or specialist governance software experience is required. Complete beginners should expect structured pre-reading and guided use of the COBIT design materials.

Training methodology

The instructor leads short COBIT 2019 concept sessions followed by worked examples drawn from board oversight of cyber risk, digital investment and outsourced services. Participants use the COBIT 2019 Design Toolkit in facilitated teams to assess a corporate case, score design factors, select priority objectives and design governance components. Board-paper critiques, committee mandate drafting and dashboard design exercises connect the framework to realistic governance work. The final day is an application clinic in which participants convert their design into a sequenced implementation plan for their own organisation or a supplied case.

Course outline

Day 1: Board governance foundations and COBIT 2019 architecture

• Corporate board accountabilities for enterprise value, risk and performance
• COBIT 2019 principles for governance systems and governance frameworks
• Governance versus management roles in the EDM and APO domains
• COBIT governance system components and their board-level relevance
• Enterprise goals, alignment goals and the COBIT goal cascade
• Stakeholder needs and governance objectives for board committees
• COBIT 2019 Governance and Management Objectives reference model

Workshop: Participants analyse a board oversight failure scenario and produce a map of missing governance accountabilities, decisions and information flows.

Day 2: Designing a tailored governance system

• COBIT 2019 design workflow and governance system design outputs
• Enterprise strategy and enterprise goals as design-factor inputs
• Risk profile, threat landscape and regulatory compliance design factors
• IT-related issues and technology adoption strategy assessment
• Sourcing model, implementation methods and technology role design factors
• Enterprise size and capability targets in governance system tailoring
• Using the COBIT 2019 Design Toolkit to record and interpret design choices

Workshop: Teams complete a design-factor assessment for a regulated growth company and produce an initial governance system design profile.

Day 3: Objectives, structures and decision rights

• Prioritising EDM objectives for board direction, evaluation and monitoring
• Selecting supporting APO, BAI, DSS and MEA objectives
• Board, audit committee, risk committee and technology committee mandates
• Decision-rights matrices for investment, risk acceptance and major incidents
• RACI role design for directors, executives, control owners and assurance providers
• Policies, principles and procedures as COBIT governance components
• Information flows and escalation criteria for board-level oversight

Workshop: Participants create a committee mandate and decision-rights matrix for cyber risk, digital investment and third-party service oversight.

Day 4: Measurement, assurance and governance performance

• Cascading enterprise goals into board-level governance measures
• Designing board dashboards for value, risk, resources and performance
• Key goal indicators and key performance indicators in COBIT 2019
• Performance management concepts and process capability levels
• Governance capability gap assessment and target-state definition
• Three-lines assurance mapping and independent governance evaluation
• Evidence requirements for audit trails, compliance reporting and board challenge

Workshop: Participants build a board dashboard and capability-gap register that specifies measures, thresholds, owners, evidence and escalation actions.

Day 5: Implementation roadmap and board adoption

• Sequencing governance improvements by risk, dependency and business value
• Change management for new committee practices and reporting disciplines
• Implementation roles, sponsorship and accountability assignment
• Governance design documentation and board approval requirements
• Integrating COBIT with enterprise risk management and internal audit plans
• Review cycles for design factors, objectives and governance performance
• Presenting the governance system case to directors and executive leadership

Workshop: Participants assemble and present a COBIT 2019 governance design pack with priority objectives, dashboard, capability actions and a 90-day implementation roadmap.

Tools & standards covered

COBIT 2019 Framework: Governance and Management Objectives, COBIT 2019 Design Toolkit, COBIT 2019 Implementation Guide, NIST Cybersecurity Framework 2.0

A typical training day

Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.

What the fee includes

How you can take this course

Certification

Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.

Frequently asked questions