The COBIT 2019 certification is a certificate-based credential from ISACA that validates your knowledge of COBIT, the leading framework for the governance and management of enterprise information and technology. The track has two levels: the COBIT 2019 Foundation certificate, which confirms you understand the framework's core concepts, and the COBIT Design & Implementation certificate, which proves you can tailor a governance system to a specific enterprise. Neither is a time-limited licence; ISACA COBIT certificates are awarded for a lifetime and do not require renewal (ISACA, 2026).
What COBIT 2019 is, in brief
COBIT (Control Objectives for Information and Related Technologies) is ISACA's framework for aligning IT with enterprise goals, managing IT-related risk, and demonstrating that technology delivers value. Its most important idea is the clean separation between governance, which is the board's responsibility for setting direction and monitoring outcomes, and management, which is the executive layer that plans, builds, runs, and monitors activities to meet that direction. COBIT 2019 organises this into 40 governance and management objectives across five domains, supported by design factors that let you shape a governance system for your own context. We unpack the mechanics of all this in our companion piece on the COBIT 2019 framework explained, so here we focus on the certification itself rather than re-teaching the model.
COBIT 2019 defines 40 governance and management objectives grouped into five domains: the governance domain EDM (Evaluate, Direct and Monitor) plus four management domains, APO, BAI, DSS and MEA. Understanding this split between governance and management objectives is the single most tested concept on the Foundation exam (ISACA, 2026).
The COBIT 2019 certification levels and path
The path is short and deliberate. You begin with the Foundation certificate, which builds the shared vocabulary of principles, components, and objectives that everything else depends on. From there you can pursue the Design & Implementation certificate, which is aimed at more experienced users who need to build or improve a governance system in practice. ISACA does not publish a hard, enforced prerequisite that blocks you from registering for Design & Implementation without Foundation, but the second course assumes fluency in the framework and every serious training provider expects Foundation first. We recommend treating Foundation as a genuine prerequisite rather than an optional warm-up.
- Step 1 COBIT 2019 Foundation: learn the framework's principles, the 40 objectives, the seven components of a governance system, and the goals cascade.
- Step 2 COBIT Design & Implementation: apply the 11 design factors to scope a tailored governance system and plan its rollout using the implementation lifecycle.
- Optional next steps: pair COBIT with a broader IT governance operating model, or progress toward executive-level credentials such as CGEIT for governance leadership roles.
COBIT 2019 Foundation exam format and passing score
The Foundation exam is an online, remotely proctored test of 75 multiple-choice questions with a 120-minute (two-hour) time limit, and you need a score of 65% or higher to pass (ISACA, 2026). There are no prerequisites to sit it, registration is continuous so you can book at any time, and questions are weighted across the syllabus domains rather than clustered in one area. Because the exam rewards conceptual understanding over rote recall, most candidates who can confidently explain the difference between governance and management objectives, name the domains, and describe the goals cascade are well positioned. Working through a large, scenario-style question bank is the most reliable way to expose the gaps in that understanding before exam day.
The COBIT Design & Implementation certificate
The Design & Implementation certificate is the practitioner-facing half of the track. Its exam is an online, remotely proctored test of 60 multiple-choice questions over three hours, with a lower passing threshold of 60% (ISACA, 2026). The lower pass mark reflects harder, more applied questions rather than an easier syllabus. This level centres on the 11 design factors, such as enterprise strategy, risk profile, threat landscape, and the role of IT, that COBIT uses to translate a generic set of objectives into a governance system that fits one specific organisation. It also covers the seven-phase implementation lifecycle for rolling that system out and sustaining it. If your job is to actually stand up governance rather than just describe it, this is the certificate that matters, and it maps closely to the hands-on approach we describe in our guide to a practical IT governance operating model.
How much COBIT 2019 certification costs
Budget for the exam fee plus any optional training. The COBIT 2019 Foundation exam is priced at around 175 USD, and the Design & Implementation exam is charged separately (ITSM Docs, 2026). Accredited instructor-led training is optional and typically adds several hundred to roughly a thousand US dollars depending on provider and format, but it is not required to sit either exam. Self-study using the official COBIT 2019 publications and a strong practice-question bank is a legitimate and far cheaper route, which is why many candidates skip formal training for Foundation and reserve their budget for the more applied Design & Implementation course. ISACA members generally receive discounts on exams and training, so if you expect to take more than one exam, membership can pay for itself. When you compare the exam fee against the salary uplift and lifetime validity, the total cost of the credential is modest relative to the return, particularly for professionals early in an IT governance or audit career.
ISACA has reported an average salary of roughly 114,949 USD for practitioners holding a COBIT Foundation credential, which helps explain why IT governance, audit, and risk professionals continue to add it to their profiles (ISACA / Good e-Learning, 2026).
Is COBIT 2019 certification worth it, and who is it for
For the right audience, the value is clear. COBIT 2019 certification is worth it if you work in, or want to move into, IT governance, IT audit, risk and compliance, or enterprise architecture, because it gives you a vendor-neutral vocabulary that boards, auditors, and regulators already recognise. It is especially useful for IT auditors and CISA candidates, since COBIT objectives frequently underpin audit programmes, and for anyone whose organisation needs to evidence that technology is well governed. It is less compelling if you are a hands-on engineer with no governance remit, where a technical certification would return more. A common and effective pairing is to hold COBIT alongside a service-management framework; we compare the two directly in our analysis of COBIT 2019 versus ITIL 4, which are complementary rather than competing. For those aiming at the boardroom, COBIT also builds the foundation that executive credentials like CGEIT assume, as we set out in our CGEIT IT governance executive overview.
How to prepare for the COBIT 2019 exams
A focused study plan beats passive reading. The framework is conceptual, so the goal is to internalise how the pieces connect, not to memorise lists in isolation. The sequence below is what we recommend to practitioners preparing for either exam.
- Read the core COBIT 2019 publications and map the five domains to the 40 objectives until you can reproduce the structure from memory.
- Drill the governance versus management distinction, since it anchors a large share of Foundation questions.
- For Design & Implementation, study each of the 11 design factors and practise reasoning from a scenario to a tailored governance system.
- Work through a large bank of scenario-based practice questions under timed conditions to build exam pace and surface weak areas.
- Review every wrong answer and trace it back to the underlying principle rather than just noting the correct option.
- Book the exam once you are consistently scoring comfortably above the pass mark on full-length mocks.
Handled this way, most candidates clear Foundation within a few weeks of part-time study and move on to Design & Implementation with confidence. Because the certificates never expire, the effort compounds: the framework knowledge stays useful across audit cycles, transformation programmes, and future ISACA credentials, making the COBIT 2019 certification one of the more durable investments in an IT governance career.