When the design factor value is strategic, the management objective priority should be Managed Innovation (APO04). This objective focuses on the use of creative, innovative, and future-oriented approaches to the development and use of information, technology, and services. This includes the use of emerging technologies, design thinking, and agile development. This objective also focuses on the establishment of a culture which encourages and rewards innovation and the development of new ideas.

When considering the threat landscape design factor, it is important to consider a number of components, including information security focus areas. This includes identifying and understanding the threats that could affect the enterprise and the controls that are necessary to mitigate them. Additionally, this involves considering the impact and probability levels of each threat, as well as the information flows and security policies that should be implemented to protect the enterprise from them. It is also important to consider compliance and assurance capabilities that are necessary to ensure that the enterprise is adhering to relevant regulations and best practices. Reference: https://www.isaca.org/COBIT/Pages/COBIT-2019-Framework.aspx

According to the COBIT 2019 Official Manual, it is best to acquire or develop solutions for implementing process improvement projects when the EGIT implementation program plan is being developed. This allows the implementation plan to take into account any solutions or technologies that are required to support the process improvement projects. Acquiring or developing solutions should not be done when defining the EGIT implementation roadmap or when defining potential implementation problems and opportunities, as these do not involve the actual implementation of the program plan. Solutions should be acquired or developed when executing the EGIT implementation program plan, as this is when the actual implementation of the program plan takes place.