According to the Official COBIT 2019 Study Manual from Isaca, the Information Security function is responsible for ensuring the confidentiality, integrity, and availability of information through the adoption of security policies, standards, and other security controls. This includes classifying information using an agreed-upon classification scheme for a new data collection system.

According to the Official COBIT 2019 Study Manual from ISACA, Process Practices "are capability levels that can be used as benchmarks for the maturity of processes and for assessing process performance." Process Practices are the second layer in the COBIT 2019 Framework, and they are composed of seven categories that provide detailed guidance on how to design, implement, and maintain processes.

Design factors can influence the blueprint of your enterprise's governance system and position it for the successful use of I&T.

Communicating the results and benefits of an EGIT program plan in business impact terms is essential for an enterprise to be able to show and prove the benefits realized from the implementation. This includes providing clear evidence of how the program plan has created value, such as increased efficiency, cost savings, and improved customer satisfaction. Additionally, it is important to ensure that the results and benefits are communicated to all relevant stakeholders to ensure that they are aware of the value created.