ISACA • COBIT-Design
Validates the ability to design and implement IT governance systems using the COBIT framework, covering governance implementation lifecycle, system design workflow, design factors, and governance improvement programs for enterprise information and technology.
Questions
599
Duration
180 minutes
Passing Score
60%
Difficulty
AssociateLast Updated
Feb 2026
The COBIT Design & Implementation Certificate Program, offered by ISACA, validates a professional's ability to design and implement governance systems for enterprise information and technology using the COBIT 2019 framework. The credential specifically focuses on the governance implementation lifecycle, governance system design workflow, and the application of design factors to tailor COBIT to an organization's specific context. It goes beyond conceptual understanding of COBIT to assess practical skills in building and optimizing governance programs.
This certificate is part of ISACA's broader COBIT credentialing pathway and sits above the COBIT Foundation Certificate in terms of depth and application. It demonstrates that a holder can translate COBIT's principles and enabling factors into a functioning governance system, account for organizational design factors, and drive continuous improvement in IT governance maturity. The credential is globally recognized and applicable across industries that rely on structured IT governance, risk management, and compliance frameworks.
This certificate is designed for IT professionals who are actively involved in designing or implementing IT governance frameworks within their organizations. Ideal candidates include IT governance specialists, IT managers, enterprise architects, IT auditors, risk and compliance officers, and consultants who advise organizations on governance transformation. It is also well-suited for professionals pursuing executive-level IT leadership roles who need to demonstrate governance design competency.
Teams responsible for rolling out enterprise-wide IT governance solutions will benefit significantly, as will students and recent graduates who want to differentiate themselves in the IT governance domain. Candidates are expected to have foundational knowledge of COBIT concepts — either through the COBIT Foundation Certificate or equivalent practical experience — before pursuing this more advanced credential.
ISACA does not mandate a formal prerequisite certification to register for this exam, but candidates are strongly advised to hold the COBIT Foundation Certificate or have equivalent working knowledge of COBIT 2019 concepts, terminology, and the COBIT performance management system. Without this grounding, the design and implementation content will be difficult to contextualize.
Practical experience in IT governance, IT management, or a related field is highly recommended. Familiarity with related frameworks such as ITIL, ISO 27001, and risk management standards will also support comprehension of how COBIT design factors interact with real organizational environments. ISACA offers accredited training courses specifically aligned to this certificate that candidates can use to build readiness before sitting the exam.
The COBIT Design & Implementation exam is a computer-based, remotely proctored assessment consisting of 60 multiple-choice questions. The exam must be completed within 180 minutes (3 hours). A passing score of 60% is required, meaning candidates must answer at least 36 questions correctly. The exam fee is US$275 for both ISACA members and non-members.
Candidates register on a continuous basis with no enrollment windows or restrictions, and can schedule a testing appointment as early as 48 hours after payment. Exam eligibility is valid for 12 months from the registration date, and appointments can be booked up to 90 days in advance. Rescheduling is permitted without penalty if done at least 48 hours before the scheduled appointment. Candidates are allowed up to 4 attempts within a rolling 12-month period.
Earning the COBIT Design & Implementation Certificate positions professionals for roles in IT governance leadership, including IT Governance Manager, Governance Consultant, IT Auditor, Risk and Compliance Manager, and Chief Information Officer. Professionals with COBIT credentials and governance expertise in North America commonly earn salaries exceeding $100,000, with ISACA reporting average practitioner salaries around $114,949 and roles such as IT Auditor reaching up to $106,000 and CISOs well above that range.
The credential is recognized globally across both public and private sectors, making it valuable for professionals operating in regulated industries such as financial services, healthcare, and government. Compared to the COBIT Foundation Certificate, this credential demonstrates hands-on design and implementation capability rather than conceptual awareness alone — a distinction that is meaningful to employers evaluating candidates for governance program leadership. It also complements other ISACA credentials such as CISA, CISM, and CGEIT, and can be combined with ITIL or ISO 27001 expertise to build a comprehensive IT governance and risk management profile.
1. A global manufacturing company operates with the following characteristics: 180 employees across three countries, simple organizational structure with flat hierarchy, limited IT staff of 5 people, and annual IT budget under $2 million. The COBIT consultant recommends tailoring the governance approach. Which three actions align with the appropriate focus area guidance for this enterprise? (Select three!)
Select all that apply2. A technology startup with 180 employees implements COBIT 2019 governance. The enterprise size design factor indicates SME classification. Which two adjustments should the organization make when tailoring the governance system? (Select two!)
Select all that apply3. An energy company establishes EDM05 Ensured Stakeholder Engagement following the Evaluate-Direct-Monitor pattern common to all EDM governance objectives. The governing body currently evaluates stakeholder needs annually, provides strategic direction, but does not systematically monitor stakeholder satisfaction or performance reporting transparency. Which key practice is deficient? (Select one!)
4. A pharmaceutical company's current state assessment in Phase 2 Where are we now identifies that APO14 Managed Data lacks defined data quality standards, data ownership is unclear, and data classification is inconsistent. The assessment team must document these findings. Which output should capture this information? (Select one!)
5. A software development company adopts Design Factor 9 (IT Implementation Methods) with 70% Agile, 20% DevOps, and 10% Traditional Waterfall. The CTO asks which management objectives should be prioritized to align governance with these implementation methods. Which objective receives highest priority from Agile methodology? (Select one!)
All exams included • Cancel anytime