Evaluate Direct and Monitor (COBIT 2019)

Parent Process Reference Framework (PRF):  COBIT

Evaluate Direct and Monitor domain consists of the following 5 processes

EDM01: Ensured Governance Framework Setting and Maintenance

Provide a consistent approach integrated and aligned with the enterprise governance approach. IT-related decisions are made in line with the enterprise’s strategies and objectives and desired value is realized. To that end, ensure that IT-related processes are overseen effectively and transparently; compliance with legal, contractual and regulatory requirements is confirmed; and the governance requirements for board members are met.

EDM02: Ensured Benefits Delivery

Optimize the value to the business from investments in business processes, IT services and IT assets.

Secure optimal value from IT-enabled initiatives, services and assets; cost-efficient delivery of solutions and services; and a reliable and accurate picture of costs and likely benefits so that business needs are supported effectively and efficiently.

EDM03: Ensured Risk Optimisation

Ensure that the enterprise’s risk appetite and tolerance are understood, articulated and communicated, and that risk to enterprise value related to the use of IT is identified and managed.

Ensure that IT-related enterprise risk does not exceed risk appetite and risk tolerance, the impact of IT risk to enterprise value is identified and managed, and the potential for compliance failures is minimised.

EDM04: Ensured Resource Optimisation

Ensure that adequate and sufficient IT-related capabilities (people, process and technology) are available to support enterprise objectives effectively at optimal cost.

Ensure that the resource needs of the enterprise are met in the optimal manner, IT costs are optimised, and there is an increased likelihood of benefit realisation and readiness for future change.

EDM05: Ensure Stakeholder Engagement

Ensure that stakeholders are identified and engaged in the I&T governance system and that enterprise I&T performance and conformance measurement and reporting are transparent, with stakeholders approving the goals and metrics and necessary remedial actions.

Ensure that stakeholders are supportive of the IT strategy and road map, communication to stakeholders is effective and timely, and the basis for reporting is established to increase performance. Identify areas for improvement, and confirm that IT-related objectives and strategies are in line with the enterprise’s strategy.