COBIT 2019: Assess, Guide and Monitor (EDM)

COBIT 2019: The Complete Guide to Assessing, Governing and Monitoring IT Governance

COBIT 2019, a widely recognized process reference framework (PRF), provides a comprehensive set of guidelines for the governance and management of information and related technologies. Within its framework, the “Evaluate, Direct and Monitor” (EDM) domain plays a crucial role in ensuring that IT activities are aligned with business objectives and that risks are managed effectively.

What is the EDM Domain in COBIT 2019?

The EDM domain focuses on the continuous assessment of IT performance, strategic direction of IT activities, and monitoring compliance with policies and regulations. It provides a set of processes that enable organizations to:

• Evaluate IT performance against business objectives.
• Direct IT activities to ensure they are aligned with the organization's strategy.
• Monitor compliance with relevant policies, regulations and standards.

Parent Process Reference Framework (PRF): COBIT 2019

The COBIT 2019 framework for Assessing Direct Domain and Monitoring presents five essential processes that ensure governance, delivery of benefits, optimization of risks and resources, and stakeholder engagement. Below, check out each of them:

Evaluation and Monitoring Processes

EDM01: Configuration and Maintenance of the Assured Governance Framework

This process establishes a consistent, integrated approach aligned with corporate governance. Its main guidelines are:

1. Ensure that IT-related decisions are in line with the company's strategies and objectives.

2. Carry out supervision processes effectively and transparently, ensuring compliance with legal, contractual and regulatory requirements.

3. Meet governance requirements for board members, enabling the realization of desired value.
   
   

EDM02: Delivery of Assured Benefits

Focused on optimizing business value, this process aims to maximize the benefits of investments in business processes, services and IT assets. Actions include:

1. Ensure IT-enabled initiatives and assets deliver value cost-effectively.

2. Obtain a reliable and accurate picture of expected costs and benefits in order to support business needs effectively and efficiently.
   
   

EDM03: Guaranteed Risk Optimization

The goal here is to ensure that the risks associated with the use of IT are identified and managed appropriately. To do this, it is necessary to:

1. Understand, articulate and communicate the company's risk appetite and tolerance.

2. Monitor that corporate risk related to IT does not exceed established limits.

3. Identify and manage the impact of IT risks to ensure business value is protected while minimizing potential compliance failures.
   
   

EDM04: Guaranteed Resource Optimization

This process seeks to ensure that IT resources (people, processes and technology) are available in the optimal quantity and quality to support corporate objectives, always at the ideal cost. The main actions involved are:

1. Optimally meet the company's resource needs.

2. Optimize IT costs, increasing the likelihood of realizing the expected benefits.

3. Prepare the organization for future changes while maintaining agility and operational efficiency.
   
   

EDM05: Ensured Stakeholder Engagement

Effective stakeholder engagement is critical to successful IT governance. This process ensures that:

1. Stakeholders are identified and integrated into the I&T governance system.

2. There is transparency in measurement, performance and compliance reporting.

3. Goals and metrics are approved, with corrective actions when necessary.

4. The IT strategy and roadmap are communicated effectively and in a timely manner, identifying areas for improvement and ensuring alignment with the company strategy.

The Importance of EDM Mastery

The EDM domain is essential to ensuring that IT delivers business value and that risks are managed effectively. By implementing EDM domain processes, organizations can:

1. Improve IT alignment with business objectives.
2. Optimize the use of IT resources.
3. Reduce the risks associated with the use of IT.
4. Increase transparency and accountability in IT activities.
5. improve communication with stakeholders.
   
   

COBIT 2019 and IT Governance

COBIT 2019, with its focus on the EDM domain, provides a comprehensive framework for IT governance. By adopting its guidelines, organizations can ensure that IT is a strategic enabler of business objectives and that risks are managed effectively.

Translated by 4MATT Tecnologia from the original Evaluate Direct and Monitor (COBIT 2019)

Tags : ServiceNow, Snow Software, Software Asset Management, Software Asset Management, SAM, FINOps, ITAM, ITSM, Flexera, Cloud Management governance framework, COBIT 2019, governance practices, information technologies, IT corporate, best practices , IT governance, main concepts, understand the main concepts, COBIT 2019 governance processes, COBIT 2019 edm domains, IT corporate governance, IT investments, apply an integrated framework, change management, top management, cobit framework, monitoring evaluation , it management, process practices, bai build acquire, deliver serve, cobit domains, COBIT 2019 reference model, organizational structures, evaluate direct, monitor evaluate, build acquire, lifecycle, FAQ, cobit processes, principles policies, human resources, evaluation, targeting, enabling processes, align plan, it enterprise, apo domain, it management, dss e deliver, process benchmark, corporate objectives, business processes, risk appetite, it strategy, corporate governance