The Skills Framework for the Information Age (SFIA) has been used as a basis for developing guidance for the COBIT governance component of people, skills and competencies. SFIA is a globally recognized framework that describes the skills required by professionals who work with information and technology2, p. 36. References: 2: COBIT 2019 Framework: Introduction and Methodology

The governance implementation roadmap is a document that outlines the steps and activities involved in designing and implementing a governance system for an enterprise using COBIT 2019. The governance implementation roadmap consists of seven phases: what are the drivers; where are we now; where do we want to be; what needs to be done; how do we get there; did we get there; how do we keep up momentum. The next step after planning the program is to execute the plan. This means that after developing a detailed business case and high-level program plan for implementing a governance system in phase four (what needs to be done), the enterprise should proceed to phase five (how do we get there), which involves executing the program plan according to the defined scope, approach, benefits, costs, risks, and timeline. This phase also involves managing the program resources, deliverables, quality, performance, and stakeholder expectations, as well as monitoring and controlling the program progress and outcomes.
References: : COBIT 2019 Implementation Guide: page 41-42 : COBIT 2019 Implementation Guide: page 51-
52

The capability levels are a measure of how well an enterprise performs its information and technology governance and management processes in terms of process attributes such as process performance, process definition, process deployment, process measurement, process control, process optimization etc. The capability levels range from 0 (incomplete) to 5 (optimizing), indicating the degree of maturity and effectiveness of an enterprise's information and technology governance and management processes. The targeted capability levels are the desired levels of performance that an enterprise wants to achieve for its information and technology governance and management processes, based on its strategy, objectives, needs, and expectations. The targeted capability levels provide a basis for defining the improvement goals and objectives for the processes. The capability-level gap analysis is a process that involves comparing the current capability levels of an enterprise's information and technology governance and management processes with the targeted capability levels, and identifying the gaps or differences between them. The capability-level gap analysis helps to determine the improvement actions and initiatives that are required to close the gaps and achieve the targeted capability levels. The primary benefit or output derived from setting targeted capability levels and performing a capability-level gap analysis for selected processes is identification of process improvement opportunities. This means that by setting targeted capability levels and performing a capability- level gap analysis for selected processes, an enterprise can identify the areas of weakness or inefficiency in its information and technology governance and management processes, and determine the potential solutions or enhancements that can improve its process performance, quality, value, etc. This will also help to align the information and technology governance system with the enterprise's strategy and objectives.
References: : COBIT 2019 Design Guide: page 53-54 : COBIT 2019 Process Assessment Model: page 11-13

Risk management focuses on the preservation of value, while value delivery focuses on the creation of value.
Value is the benefit that an enterprise derives from using information and technology. Value can be measured in terms of effectiveness, efficiency, quality, innovation, etc. Value delivery is the process of ensuring that information and technology investments and services contribute to the achievement of enterprise goals and objectives. Value delivery focuses on the creation of value by aligning I&T with business requirements, optimizing costs and resources, enhancing performance and outcomes, etc. Risk management is the process of identifying, analyzing, evaluating, treating, monitoring, and communicating risks that affect the achievement of enterprise objectives. Risk management focuses on the preservation of value by ensuring that risks are within acceptable levels, that opportunities are exploited, that uncertainties are reduced, etc.12 References:
COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance System

The number of business processing hours lost due to unplanned service interruptions would be an appropriate metric associated with an enterprise goal of business service continuity and availability. A metric is a quantifiable measure that is used to track and assess the status of a specific process or activity. Business service continuity and availability is one of the 17 generic enterprise goals defined by COBIT that describes the desired outcome of ensuring that critical business services are delivered at agreed levels and are resilient to disruptions. The number of business processing hours lost due to unplanned service interruptions is a metric that reflects how well this outcome is achieved.13 References: COBIT 2019 Framework: Introduction and Methodology, COBIT 2019 Framework: Governance and Management Objectives