COBIT Design Factors (DF)
1. Enterprise Strategy
Growth/Acquisition
Innovation/Differentiation
Cost Leadership
Client Service/Stability
2. Enterprise goals
Portfolio of competitive products and services
Managed business risk
Compliance with external laws and regulations
Quality of financial information
Customer-oriented service culture
Business service continuity and availability
Quality of management information
Optimization of internal business process functionality
Optimization of business process costs
Staff skills, motivation and productivity
Compliance with internal policies
Managed digital transformation programs
Product and business innovation
Customer
Financial
Growth
Internal
3. Risk profile
IT-investment decision making, portfolio definition and maintenance
Program and projects lifecycle management
IT cost and oversight
IT expertise, skills and behavior
Enterprise/IT architecture
IT operational infrastructure incidents
Unauthorized actions
Software adoption/usage problems
Hardware incidents
Software failures
Logical attacks (hacking, malware, etc.)
Third-party/supplier incidents
Noncompliance
Geopolitical issues
Industrial action
Acts of nature
Technology-based innovation
Environmental
Data and information management
Risk Category
4. I&T-related issues
A...T (20)
5. Threat landscape
Normal
High
6. Compliance requirements
Low compliance requirements
Normal compliance requirements
High compliance requirements
7. Role of IT
Support
Factory
Turnaround
Strategic
8. Sourcing model for IT
Outsourcing
Cloud
Insourced
Hybrid
9. IT implementation methods
Agile
DevOps
Traditional
Hybrid
10. Technology adoption strategy
First mover
Follower
Slow adopter
11. Enterprise size
Large enterprise (default)
Small and medium enterprise
Designing
Step 1: Understand the Enterprise Context and Strategy
Understand Enterprise Strategy
Understand Enterprise Goals
Understand the Risk Profile
Understand Current I&T-Related Issues
Step 2: Determine the Initial Scope of the Governance System
Translating Design Factors into Governance and Management Priorities
Consider Enterprise Strategy (DF 1)
Consider Enterprise Goals and Apply the COBIT Goals Cascade (DF 2)
Consider the Risk Profile of the Enterprise (DF 3)
Consider Current I&T-Related Issues of the Enterprise (DF 4)
Step 3: Refine the Scope of the Governance System
Consider the Threat Landscape (DF 5)
Consider Compliance Requirements (DF 6)
Consider the Role of IT (DF 7)
Consider the Sourcing Model for IT (DF 8)
Consider IT Implementation Methods (DF 9)
Consider the Technology Adoption Strategy (DF 10)
Consider Enterprise Size (DF 11)
Step 4: Resolve Conflicts and Conclude the Governance System Design
Resolve Inherent Priority Conflicts
Conclude the Governance System Design
Design factors are factors that can influence the design of an enterprise’s governance system and position it for
success in the use of I&T
Comments