In COBIT 2019, what does separating governance from management mean?

• A. Governance handles daily tasks while management directs strategy.
• B. Governance and management are identical functions.
• C. Management defines rules; governance implements them.
• D. Governance sets direction and monitors outcomes; management plans and executes day-to-day activities to achieve objectives.

Answer: (D)

The main idea here is the distinction between setting direction and overseeing outcomes versus handling day-to-day execution. In COBIT 2019, governance is the oversight function that defines what needs to be achieved, approves policies and risk appetite, and monitors performance to ensure value is delivered and risks are managed. Management, on the other hand, translates those directions into action: it plans, builds, runs, and monitors the actual activities, resources, and processes needed to achieve the objectives.

So, governance sets the direction, clarifies expectations, and checks on results; management organizes and conducts the work to realize those objectives. This separation keeps strategic oversight from routine execution and improves accountability. The other descriptions mix up those roles by placing daily tasks in governance, or by treating governance and management as the same, or by flipping who defines rules and who implements them.