COBIT Design Factors (DF) 1. Enterprise Strategy Growth/Acquisition Innovation/Differentiation Cost Leadership Client Service/Stability 2. Enterprise goals Portfolio of competitive products and services Managed business risk Compliance with external laws and regulations Quality of financial information Customer-oriented service culture Business service continuity and availability Quality of management information Optimization of internal business process functionality Optimization of business process costs Staff skills, motivation and productivity Compliance with internal policies Managed digital transformation programs Product and business innovation Customer Financial Growth Internal 3. Risk profile IT-investment decision making, portfolio definition and maintenance Program and projects lifecycle management IT cost and oversight IT expertise, skills and behavior Enterprise/IT architecture IT operational infrastructure incidents Unauthorized actions Software adoption/usage problems Hardware incidents Software failures Logical attacks (hacking, malware, etc.) Third-party/supplier incidents Noncompliance Geopolitical issues Industrial action Acts of nature Technology-based innovation Environmental Data and information management Risk Category 4. I&T-related issues A...T (20) 5. Threat landscape Normal High 6. Compliance requirements Low compliance requirements Normal compliance requirements High compliance requirements 7. Role of IT Support Factory Turnaround Strategic 8. Sourcing model for IT Outsourcing Cloud Insourced Hybrid 9. IT implementation methods Agile DevOps Traditional Hybrid 10. Technology adoption strategy First mover Follower Slow adopter 11. Enterprise size Large enterprise (default) Small and medium enterprise Designing Step 1: Understand the Enterprise Context and Strategy Understand Enterprise Strategy Understand Enterprise Goals Understand the Risk Profile Understand Current I&T-Related Issues Step 2: Determine the Initial Scope of the Governance System Translating Design Factors into Governance and Management Priorities Consider Enterprise Strategy (DF 1) Consider Enterprise Goals and Apply the COBIT Goals Cascade (DF 2) Consider the Risk Profile of the Enterprise (DF 3) Consider Current I&T-Related Issues of the Enterprise (DF 4) Step 3: Refine the Scope of the Governance System Consider the Threat Landscape (DF 5) Consider Compliance Requirements (DF 6) Consider the Role of IT (DF 7) Consider the Sourcing Model for IT (DF 8) Consider IT Implementation Methods (DF 9) Consider the Technology Adoption Strategy (DF 10) Consider Enterprise Size (DF 11) Step 4: Resolve Conflicts and Conclude the Governance System Design Resolve Inherent Priority Conflicts Conclude the Governance System Design Design factors are factors that can influence the design of an enterprise’s governance system and position it for success in the use of I&T