ISACA • COBIT-Foundation
Validates foundational knowledge of the COBIT 2019 framework, covering framework components, governance and management principles, performance management, governance objectives, tailored system design, and alignment of IT goals with strategic business objectives.
Questions
600
Duration
120 minutes
Passing Score
65%
Difficulty
FoundationalLast Updated
Feb 2026
The COBIT Foundation Certificate, offered by ISACA, validates an individual's foundational knowledge of the COBIT 2019 framework — the globally recognized framework for the governance and management of enterprise information technology. Earning this certificate demonstrates proficiency in COBIT's core concepts, principles, and methodologies, including how governance systems are structured and how management and governance objectives are defined, organized, and applied. It also covers how organizations can design tailored governance systems that address their unique context and requirements.
The certification is grounded in COBIT 2019, which introduced significant updates over its predecessor COBIT 5, including a renewed focus on governance system components, a principles-based approach, and a flexible design toolkit for building bespoke governance solutions. Certificate holders are equipped to articulate how IT goals align with strategic business objectives and how performance management practices support continuous improvement across an enterprise's governance model.
The COBIT Foundation Certificate is appropriate for a wide range of professionals who interact with IT governance, risk, and compliance functions. Primary audiences include senior IT and business managers, IT auditors, risk and GRC (Governance, Risk, and Compliance) managers, regulators, and consultants who advise organizations on IT governance practices. Program managers responsible for governance-related initiatives also benefit from this credential.
The certificate is equally valuable for students and recent graduates seeking to establish credibility in IT governance, as well as professionals already holding related certifications such as CISA or CISM who want to formalize their COBIT knowledge. Because no prerequisites are required, professionals at any career stage can pursue this credential as an entry point into the ISACA certification ecosystem.
There are no formal prerequisites to register for the COBIT Foundation Certificate exam. Candidates can register at any time without restrictions, and eligibility is valid for 12 months from the date of registration. Testing appointments can be scheduled as early as 48 hours after payment of the exam registration fee and are available up to 90 days in advance.
While no prior certification or formal training is required, candidates will benefit from some familiarity with IT governance concepts and the general role of frameworks in enterprise IT management. ISACA recommends reviewing the official COBIT 2019 Foundation materials and taking advantage of available study resources such as the COBIT 2019 Foundation Online Course, which provides approximately 5 hours of self-paced content, before attempting the exam.
The COBIT Foundation Certificate exam is a computer-based, remotely proctored assessment consisting of 75 multiple-choice questions. Candidates are given 120 minutes (2 hours) to complete the exam. The exam is delivered online through ISACA's proctoring platform, allowing candidates to test from any location with a suitable internet connection. There is no in-person testing center option.
The passing score is 65% or higher, meaning candidates must answer at least 49 of the 75 questions correctly. The exam fee is US$175 for both ISACA members and non-members. Candidates may reschedule without penalty up to 48 hours before their scheduled appointment. The exam does not include unscored survey questions — all 75 questions contribute to the final score.
The COBIT Foundation Certificate provides professionals with a recognized credential that demonstrates IT governance competency to employers across industries. Certified practitioners report average salaries of approximately $114,949 according to ISACA data, with roles such as IT Auditor, Risk Management Analyst, Information Systems Audit Manager, Governance Risk Consultant, and IT Consultant among the most common job titles held by certificate holders. For more senior IT governance roles such as CISO or CTO, salaries can extend well beyond $150,000.
Beyond immediate salary benefits, the certificate serves as a stepping stone to ISACA's Certified in the Governance of Enterprise IT (CGEIT) certification — the only vendor-neutral, individual-focused IT governance certification globally recognized for C-suite and executive-level roles. CGEIT holders earn an average of 25% more than the North American IT professional average. Because COBIT is framework-agnostic and internationally recognized, the credential is valued across sectors including financial services, healthcare, government, and consulting, making it relevant for professionals seeking governance roles in any geography.
1. A telecommunications provider is implementing BAI08 Managed Knowledge to support informed decision making. The knowledge management lead asks how this differs from Component 4 Information of the governance system. Which statement correctly distinguishes these concepts? (Select one!)
2. A technology company's board is evaluating a proposal from the CIO to implement COBIT 2019. The CIO states that she will be accountable for Enterprise Governance of Information and Technology once the framework is adopted. The board chair questions this statement. Who is correctly accountable for EGIT according to COBIT 2019? (Select one!)
3. An airline company is implementing DSS04 Managed Continuity to ensure business resilience. The operations director needs to understand the primary purpose of this management objective. What is the main focus of DSS04? (Select one!)
4. A financial services firm is implementing both BAI06 Managed IT Changes and BAI07 Managed IT Change Acceptance and Transitioning. The change manager asks what distinguishes these two closely related objectives. Which statement best explains the difference? (Select one!)
5. A technology company is implementing APO05 Managed Portfolio. The portfolio manager asks what the primary purpose of this objective is. Which statement best describes APO05's purpose? (Select one!)
All exams included • Cancel anytime