1.1 Current Exam Facts

This opening section exists for an exam reason, not a brochure reason: the COBIT 2019 Foundation sitting rewards people who already know the logistics before they memorize a single process ID. ISACA (Information Systems Audit and Control Association, now branded simply as ISACA) writes items that assume you understand what kind of credential this is, how the 75-item blueprint is weighted, and what a closed-book, remotely proctored sitting actually allows. Candidates who treat "exam facts" as filler routinely miss easy points on passing score, eligibility, and domain emphasis.

Why logistics show up on this exam

COBIT is ISACA's framework for the governance and management of enterprise information and technology (EGIT). The historic expansion is Control Objectives for Information and Related Technologies; on the exam, treat COBIT as the named framework and COBIT 2019 as the current product family you are being tested on. The Foundation sitting is a knowledge-level certificate, not an experience-based certification. That distinction changes what you study, how you register, and what happens after you pass.

You will not be asked to design a full governance system from scratch here. You will be asked to recognize official names, counts, relationships, and the purpose of each blueprint domain. Logistics matter because they tell you where ISACA spends items: more than half the exam sits in two domains. If you allocate study time the way a typical "eight chapters, equal effort" plan suggests, you will under-prepare the 30% and 23% domains and over-prepare the 3% business-case slice.

Official owner, format, and scoring

ISACA owns and publishes the COBIT Foundation Certificate (also marketed as COBIT 2019 Foundation). The live owner page is ISACA's COBIT Foundation credentialing page. Administration details in this guide follow that page plus ISACA's Certificate Program Exam Guide V4 (February 2026).

Two numbers to lock in tonight: 65% and 49 of 75. A raw score of 48 is a fail. ISACA does not publish an official Foundation pass rate. Ignore training-vendor percentages you see on forums; they are not an ISACA figure and they will not appear as a scored fact on your result screen.

The fee is the same for members and non-members. There is no member discount on this particular exam registration. Purchases are non-refundable and non-transferable. If you buy a voucher under one ISACA profile, you cannot hand it to a colleague, and unused eligibility is forfeited when the 6-month window closes.

Exam trap: 12 months versus 6 months

Older third-party blogs and some cached marketing copy still say you have a year to sit. The February 2026 certificate-program candidate guide sets eligibility at 6 months from the purchase date. If the voucher sits unused, the fee is forfeited. Plan the sitting inside that window. Do not build a study calendar around a 12-month assumption.

How many options does each item have?

The current Certificate Program Exam Guide V4 (February 2026) describes the sitting only as 75 multiple-choice questions. It does not restate how many options each item carries. ISACA's earlier COBIT-specific COBIT 2019 Foundation Certificate Exam Guide did publish that number: each multiple-choice question has three options with only one correct answer. Treat three options as the expectation, not as a rumor, and do not be thrown if the form you sit inside the PSI Secure Browser looks different. Either way the study move is identical — learn the named lists rather than counting distractors. Practice questions in this guide use four options because extra distractors expose more traps, not because the real exam does.

The eight official domains and expected items

ISACA publishes eight domains and their weights. Use the weights as your study budget. The expected-item column is 75 × official weight, rounded to the nearest whole number. Rounding is noted because several products are not whole items.

Those rounded counts sum to 75. Treat them as a planning model, not a promise that your form will contain exactly 23 component items. ISACA can still sample across the blueprint; the weights tell you the intended emphasis.

What each domain is actually testing

Governance System and Components (30%) is the largest slice. It tests the seven components of a governance system, how they interact, generic versus variant components, and how components support objectives. If you can over-learn only one list, over-learn the seven components.

Governance and Management Objectives (23%) tests the 40-objective core model across five domains: EDM (Evaluate, Direct and Monitor), APO (Align, Plan and Organise), BAI (Build, Acquire and Implement), DSS (Deliver, Service and Support), and MEA (Monitor, Evaluate and Assess). You need recognition-level command of objective IDs and the goals cascade, not the ability to recite every activity metric.

Principles (13%) tests the six governance-system principles plus the three governance-framework principles. Named-list items are common.

Framework Introduction (12%) tests why COBIT exists, EGIT versus the IT function, the product family, audience, and how COBIT sits as an umbrella framework next to other standards.

Implementation (8%) tests the seven-phase implementation lifecycle — enough to sequence phases and explain their purpose, not enough to run a full program office.

Designing a Tailored Governance System (7%) tests the 11 design factors and the idea that COBIT is tailored, not copied wholesale.

Performance Management (4%) tests the capability model (levels 0–5).

Business Case (3%) tests why a governance initiative needs a business case. Two expected items is not a reason to skip it; it is a reason not to spend a weekend on it while the seven components are still fuzzy.

Scheduling, identity, and the sitting itself

Registration is continuous: there is no exam window and there are no prerequisites. After you pay, ISACA's live page says you may schedule a testing appointment as early as 48 hours after payment. PSI lists appointments only 90 days ahead, so a date five months out will not appear until it enters that 90-day window. Check back as the date approaches; an empty calendar in month one is normal, not a broken voucher.

You may reschedule without penalty if you do it at least 48 hours before the appointment and you are still inside your 6-month eligibility. Cut that 48-hour line and you risk a forfeit.

On exam day you must start no later than 15 minutes after the scheduled start. Miss that window and you are a no-show and the fee is forfeited. The sitting is closed-book: no notes, no phone, no second monitor, no printed COBIT manual. The desk must be clean. There are no breaks. Your government photo ID must match the name on your ISACA profile, including the order of given and family names. Create the MyISACA account with the name that is already printed on that ID.

When you submit, you receive an immediate score and pass/fail result. There is no multi-week wait for a scaled report before you know whether you earned the certificate.

What this credential is — and is not

Passing Foundation proves knowledge of COBIT concepts, principles, and methodologies used to establish, enhance, and maintain a system for effective governance and management of enterprise I&T. It does not create a recurring certification with a published CPE (Continuing Professional Education) cycle or an expiration date. ISACA does not publish a Foundation CPE requirement. That is the opposite of CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), and CGEIT (Certified in the Governance of Enterprise IT), which are experience-gated certifications with maintenance rules. Section 1.2 unpacks that contrast; the exam-fact you need now is simpler: Foundation is a certificate you can sit with zero years of governance experience.

The published next step is COBIT Design & Implementation: 60 questions, 180 minutes, 60% passing score, US$275. Foundation is the published prerequisite. Do not confuse the two sittings. Design & Implementation is longer, uses a 60% pass mark, costs more, and assumes you already hold Foundation.

Time math you should do before you sit

120 minutes for 75 items is 96 seconds per item. That is comfortable if you are recognizing named lists and rejecting distractors. It is tight if you reread every scenario twice. Flag and move. The 65% bar means you can miss 26 items and still pass — but only if you do not leak easy points on components, objective IDs, and principles.

If your eligibility is already at month five, schedule now. A forfeited voucher is a full US$175 rewrite, not a free extension. Buy the voucher when your study plan already has a target week, not as a motivational poster.

A logistics scenario

Sam pays on 1 March, assumes a year of eligibility, and aims for November. Under the February 2026 candidate guide, that voucher expires around 1 September. Sam either sits inside six months or forfeits the fee. The same Sam later sees a desired Saturday that is 120 days away; PSI will not list it yet. Sam should watch the 90-day appointment window, not email ISACA claiming the exam "disappeared."