COBIT 2019: Align, Plan and Organize (APO)

The Align, Plan, and Organize (APO) domain of COBIT 2019 is a set of 14 processes that guides how IT should be governed, planned, and aligned with corporate goals—encompassing everything from strategy and portfolio to risk management, security, and data. It is the operational core of IT governance according to the COBIT 2019 framework, adopted by organizations seeking digital maturity with strategic alignment.

Detailed Process Description

APO 01 – Managed IT Management Structure

Objective: Design the IT management system based on corporate goals.

Guidelines:

1. Implement all necessary components of the management system.
2. Define clear processes, roles, and responsibilities.
3. To ensure compliance with standards such as ISO/IEC 20000.

Learn more about IT governance and COBIT at 4MATT.

APO 02 – Managed Strategy

Objective: To provide a holistic view of business and IT, defining future direction.

1. Assess digital maturity.
2. Connecting initiatives to digital transformation.
3. Integrate changes into channels, processes, and organizational culture.

APO 03 – Managed Enterprise Architecture

Objective: Define an integrated enterprise architecture to increase agility and reduce costs.

1. Create models for processes, data, and technology.
2. Establish standards and taxonomies.
3. Reusing components to reduce costs.

APO 04 – Managed Innovation

Objective: Monitor trends and identify opportunities for innovation.

1. Explore emerging technologies.
2. Supporting digital architecture and strategy decisions.
3. Gain a competitive advantage and a better customer experience.

APO 05 – Managed Portfolio

Objective: Aligning IT investments with organizational strategy.

1. Evaluate, prioritize, and monitor a portfolio of projects.
2. Adjust initiatives based on performance and strategic changes.

APO 06 – Managed Budget and Costs

Objective: Manage IT financial resources with transparency and efficiency.

1. Controlling costs and benefits.
2. Establishing partnerships between IT and business areas.
3. Following best practices such as ITIL Financial Management.

See how reduce software licensing costs.

APO 07 – Managed Human Resources

Objective: To ensure recruitment, training, and talent management in IT.

1. To plan and continuously evaluate skills.
2. Optimize talent to meet business objectives.

APO 08 – Managed Relationships

Objective: Manage stakeholder relationships transparently.

1. Establish clear communication.
2. To promote collaboration between IT and business areas.

APO 09 – Managed Service Contracts

Objective: Align service levels with business expectations.

1. Define SLAs and monitor KPIs.
2. To ensure that services meet current and future demands.

APO 10 – Managed Suppliers

Objective: To ensure the performance and competitiveness of IT suppliers.

1. Select and monitor suppliers.
2. Minimize the risk of external failures.

APO 11 – Managed Quality

Objective: Maintaining quality standards in IT processes and services.

1. Implement ongoing controls and audits.
2. Improve efficiency and reliability.

APO 12 – Managed Risk

Objective: Identify, assess and mitigate IT risks.

1. Integrate with Enterprise Risk Management (ERM).
2. Balancing the costs and benefits of risk controls.

See the full breakdown of the 6 APO12 management practices at [link to APO12 management practices]. our dedicated Risk Management guide (APO12).

APO 13 – Managed Security

Objective: To ensure information security and reduce incidents.

1. Monitor vulnerabilities.
2. Keep risks within acceptable levels.

Read more about Information security and compliance.

APO 14 – Managed Data

Objective: Ensure data governance throughout the data lifecycle.

1. Control the creation, maintenance, and archiving of data.
2. Using critical data to achieve corporate objectives.

COBIT 2019 and ServiceNow: governance implemented on the platform.

APO domain processes don't just exist on paper—they need a platform to execute them with reliable data. ServiceNow Enables APO 09 (service contracts with SLAs) via ITSM, APO 14 (data governance) via CMDB, APO 10 (suppliers) via ITAM and APO 12 (risk) via compliance modules — with 4MATT as ServiceNow Elite Partner in Brazil responsible for implementation and support.

Conclusion

The APO domain of COBIT 2019 is essential for IT to add strategic value to the business, while maintaining governance, security, and innovation.

Companies that apply these processes:

• They optimize costs and resources.
• They ensure strategic alignment.
• They reduce risks and operational failures.
• They boost digital innovation.