COBIT 2019 Foundation: Objective Structure - Purpose, Practices, and Activities

Understanding the Importance

The objective structure in COBIT 2019 is fundamental to understanding how organizations should implement governance and management practices. This framework provides a clear hierarchical organization that helps enterprises:

• Align IT governance with business objectives
• Implement controls and practices systematically
• Measure and monitor performance effectively
• Ensure comprehensive coverage of governance domains

Understanding the structure is critical because it forms the foundation for implementing COBIT principles and demonstrating competency in organizational governance.

What is Objective Structure?

The COBIT 2019 framework organizes governance and management objectives into a hierarchical structure consisting of:

1. Governance Objectives
These focus on evaluating, directing, and monitoring IT initiatives. There are 5 governance objectives that ensure organizational oversight and alignment with business strategy.

2. Management Objectives
These focus on planning, building, running, and monitoring IT services. There are 16 management objectives that support the execution of IT governance.

Together, these 21 objectives create a comprehensive framework for IT governance and management.

Purpose of Each Component

Purpose Statement
Each objective includes a purpose statement that clearly defines what needs to be accomplished. The purpose explains:

• The goal or outcome of the objective
• What value it provides to the organization
• How it contributes to overall governance

Practices
Practices are the actions or processes that need to be performed to achieve each objective. Each objective contains multiple practices that describe:

• The specific activities that need to be executed
• Responsibilities and accountability
• Expected outcomes and deliverables

Activities
Activities are the detailed tasks and steps that must be performed as part of each practice. They provide granular guidance on:

• How practices should be implemented
• Specific actions to be taken
• Inputs and outputs for each activity
• Roles and responsibilities involved

How the Structure Works

The COBIT 2019 objective structure operates on a pyramid model:

Level 1: Governance & Management Objectives (Top)
The highest level contains the 21 objectives that define the overall goals.

Level 2: Practices (Middle)
Each objective is broken down into multiple practices. For example, an objective might have 3-6 practices associated with it, each addressing different aspects of achieving the objective.

Level 3: Activities (Bottom)
Each practice is further detailed into specific activities that describe the actual implementation steps and tasks.

Example Flow:
Objective: "Ensure governance of IT is aligned with enterprise strategy"
→ Practice 1: "Establish governance framework"
→ Activity 1a: "Define governance structures and roles"
→ Activity 1b: "Document governance policies"

This hierarchical approach allows organizations to:

• Start with clear objectives aligned to business goals
• Implement practices that achieve these objectives
• Execute specific activities for each practice
• Track progress at multiple levels

Key Characteristics of the Structure

Clarity and Alignment
Each component is clearly defined and linked to demonstrate how lower-level activities support higher-level objectives.

Flexibility
Organizations can adapt implementation based on their size, complexity, and risk profile while maintaining the structural framework.

Measurability
The structure enables measurement at each level through key performance indicators and key goal indicators.

Completeness
The 21 objectives provide comprehensive coverage of IT governance and management domains without overlap.

How to Answer Exam Questions

Understanding Question Types

Exam questions about objective structure typically fall into these categories:

Type 1: Definition and Purpose Questions
Example: "What is the primary purpose of governance objectives in COBIT 2019?"
Answer Strategy: Focus on the key words from the official purpose statement. Explain the outcome the objective aims to achieve and its relationship to business alignment.

Type 2: Hierarchical Relationship Questions
Example: "How do practices relate to objectives in COBIT 2019?"
Answer Strategy: Explain that practices are the means to achieve objectives. Each objective contains multiple practices that, when implemented, result in achieving the objective's purpose.

Type 3: Implementation/Activity Questions
Example: "Which of the following is an activity within the practice of risk management?"
Answer Strategy: Understand that activities are specific, actionable tasks. Look for concrete actions rather than general statements.

Type 4: Linking Questions
Example: "Which governance objective is primarily responsible for monitoring IT performance?"
Answer Strategy: Know which governance objectives address evaluation, direction, or monitoring, and match them to specific responsibilities.

Step-by-Step Approach

Step 1: Identify the Objective
Determine which of the 21 objectives the question refers to. Know the 5 governance objectives and 16 management objectives by name and primary function.

Step 2: Understand the Purpose
Refer to the purpose statement. This is the most important single piece of information for answering questions about that objective.

Step 3: Know the Associated Practices
Be familiar with the 3-6 practices associated with each objective. You don't need to memorize all details, but understand the general flow and what each practice addresses.

Step 4: Recognize Activities
Activities are the "how" - the specific implementation steps. If asked about activities, look for concrete actions and deliverables.

Step 5: Connect to Business Value
Always relate objectives back to business outcomes. COBIT is about aligning IT with business goals.

Exam Tips: Answering Questions on Objective Structure

Before the Exam

Tip 1: Create a Master List
Create a simple document with all 21 objectives listed with their primary function. Example:
- EDM01: Evaluate and Direct Management of IT
- EDM02: Ensure Stakeholder Value Delivery
- EDM03: Ensure Risk Optimization
And so on for all governance and management objectives.

Tip 2: Use Mnemonics
Create memorable acronyms for objective groups:
- Governance objectives start with: EDM (Evaluate, Direct, Monitor)
- Management objectives include: APO (Align), BAI (Build), DSS (Deliver), MEA (Monitor)
These prefixes help you recall which category an objective belongs to.

Tip 3: Understand the Governance Objectives Deeply
Since there are only 5 governance objectives, these appear frequently on exams. Learn their specific purposes:
- EDM01: IT Governance
- EDM02: Value Delivery
- EDM03: Risk Management
- EDM04: Resource Management
- EDM05: Stakeholder Relations

Tip 4: Study Real Examples
For each objective, have one real-world example of how a practice might be implemented. This helps answer scenario-based questions.

During the Exam

Tip 5: Read Questions Carefully
Pay attention to keywords like "primarily," "directly," "mainly," and "best." These indicate which answer is most specifically correct.
- Question: "Which objective primarily addresses risk management?" (EDM03)
- Question: "Which objective directly supports risk practices?" (MEA01)

Tip 6: Eliminate Obvious Wrong Answers
If a question asks about a governance objective, eliminate all management objectives immediately, and vice versa. This cuts your choices in half.

Tip 7: Use the Hierarchy
When confused, remember:
- Objectives = What (the goal)
- Practices = How (the process)
- Activities = Detailed Steps (the implementation)
If a question asks "what should be done," look for objectives or practices. If it asks "how is it done," look for activities.

Tip 8: Look for Clue Words
Certain words frequently appear with specific objectives:
- "Alignment" → APO objectives
- "Monitoring" → MEA objectives
- "Risk" → EDM03, or practices within other objectives
- "Value" → EDM02
- "Resources" → EDM04

Tip 9: Understand Dependencies
Know that governance objectives guide management objectives. EDM02 (Value Delivery) connects to BAI (Build) and DSS (Deliver) management objectives. EDM03 (Risk) relates to risk practices across all management objectives.

Tip 10: Practice with Scenario Questions
Scenario-based questions require you to:
1. Identify the business problem
2. Link it to the relevant objective(s)
3. Select the appropriate practice or activity
Example: "An organization wants to ensure IT investments deliver business value. Which objective is primarily responsible?"
Answer: EDM02 (Ensure Stakeholder Value Delivery)

For Complex Questions

Tip 11: Map the Relationship
When overwhelmed by a complex question, draw a quick mental map:
Business Goal → Governance Objective → Management Objective → Practice → Activity

Tip 12: Distinguish Purpose from Practice
A question might ask: "What is the purpose of BAI03?" vs "What is a practice within BAI03?"
- Purpose = Single, clear outcome statement
- Practices = Multiple methods to achieve the purpose

Tip 13: Know When Objectives Overlap
Some practices appear similar across objectives. Remember:

• Risk practices appear in EDM03 but also in other objectives
• Compliance is addressed in multiple objectives
• Communication is a supporting activity across objectives

Choose the objective that primarily addresses the question.

Tip 14: Use Official Terminology
In exam answers, use the exact terminology from COBIT 2019:
- Say "governance objectives" not "governance processes"
- Say "practices" not "procedures" or "processes"
- Say "activities" not "tasks" or "steps"
This shows proper understanding of the framework.

Tip 15: Practice with Past Exam Questions
If available, practice with actual exam questions or official sample questions. This helps you understand the specific style and depth of questions asked.

Quick Reference Table

Governance Objectives (5 total)

Management Objective Categories (16 total)

Final Exam Strategy Summary

Remember: The key to successfully answering questions about objective structure is understanding how the three levels work together:

• Objectives define what an organization needs to accomplish
• Practices describe how those objectives are achieved
• Activities provide the detailed steps for implementing practices

By mastering this hierarchical relationship and knowing the purpose of each of the 21 objectives, you'll be able to answer the vast majority of exam questions correctly. Focus on understanding rather than pure memorization, and always connect answers back to business value - that's the essence of COBIT.