Framework: Use COBIT to Align Tech with Business Strategy
For structuring executive updates, the COBIT 2019 framework offers a way to align tech initiatives with business goals. An executive overview suggests using its governance language — like "value delivery" and "risk optimization" — to demonstrate strategic fluency and frame engineering work in terms executives understand.
Developed by ISACA, COBIT has evolved from its 1996 origins as a tool for financial auditors to a comprehensive framework for enterprise governance of information and technology (EGIT). The latest version, COBIT 2019, is designed to be more flexible and tailored to an organization's specific needs. At its core, COBIT 2019 features a model with 40 governance and management objectives. These objectives are organized into five domains: Evaluate, Direct, and Monitor (EDM) for governance, and Align, Plan, and Organize (APO); Build, Acquire, and Implement (BAI); Deliver, Service, and Support (DSS); and Monitor, Evaluate, and Assess (MEA) for management. A key concept for executive communication is the "Goals Cascade," a top-down approach to translate stakeholder needs into actionable enterprise goals. This cascade helps demonstrate to leadership how IT initiatives directly support broader business objectives. For instance, a business goal of expanding market reach could cascade down to a specific IT goal of enhancing cybersecurity to protect customer data. COBIT 2019 introduced 11 "design factors" that allow the framework to be customized to a company's specific context. These factors include the enterprise's strategy, risk profile, and technology adoption strategy, ensuring that the governance system is not a one-size-fits-all solution. While ITIL focuses on the specifics of IT service management, COBIT provides a broader governance framework that helps in aligning IT with business goals and managing risk. This makes it a useful tool for demonstrating strategic thinking and business acumen to senior leadership. The framework provides a common language for IT professionals, business executives, and auditors. This shared vocabulary helps in clearly articulating the value of IT in terms of business contributions, risk mitigation, and resource optimization.
