ISO Compliance Insights & Best Practices
CART
ISO Compliance Insights & Best Practices
COBIT certification cost has to be answered in two halves, because there are two things people mean by it and only one of them exists. Individuals can be certified: ISACA’s COBIT 2019 Foundation certificate exam costs US$175 and the COBIT 2019 Design & Implementation exam US$275, at the same price for members and non-members, and training sits on top. Organisations cannot be certified — there is no COBIT certificate for an enterprise, and never has been — so the “cost of COBIT certification” for a company is really the cost of designing and implementing a governance system, which is a project cost we estimate below and label as ours. There is also a date on the first half. ISACA’s credentialing pages state that the COBIT 2019 Foundation certificate will be replaced by the COBIT 7 Foundation certificate on 27 October 2026 and sunset on 26 April 2027, and that the last day to purchase the current Foundation exam or exam prep is 26 October 2026; the Design & Implementation certificate follows in 2027 with the same sunset date. This guide gives the published individual costs, the exam formats, the transition dates, an estimate of what training adds, and a separate estimate of the organisational cost of adopting COBIT 2019 by scope.
| Certificate | Exam fee (ISACA, September 2026) | Exam format | Prerequisite | Transition |
|---|---|---|---|---|
| COBIT 2019 Foundation | US$175 member; US$175 non-member | Online, remotely proctored; 2 hours; 75 multiple-choice questions; 65% to pass | None | Replaced by COBIT 7 Foundation on 27 October 2026; last day to buy the 2019 exam or prep 26 October 2026; 2019 certificate sunset 26 April 2027 |
| COBIT 2019 Design & Implementation | US$275 member; US$275 non-member | Online, remotely proctored; 3 hours; 60 multiple-choice questions; 60% to pass | COBIT 2019 Foundation | Replaced by COBIT 7 Design & Implementation in 2027; last day to buy the 2019 exam 26 October 2026; sunset 26 April 2027 |
| Implementing the NIST Cybersecurity Framework using COBIT 2019 | Priced separately by ISACA | Certificate exam | COBIT 2019 Foundation recommended | Check ISACA for its own transition |
The dates change the buying decision. Someone who wants a COBIT credential this year has until 26 October 2026 to buy the 2019 Foundation exam, and the certificate they earn will read “COBIT 2019” and sunset in April 2027 — a certificate, in ISACA’s terms, does not expire like a certification, but the programme is retired. Someone who can wait buys COBIT 7 Foundation from 27 October 2026. ISACA has not, at the time of writing, published COBIT 7 exam pricing or the framework’s content; the credential schedule is the public signal. Our guide to COBIT 2019 tracks the framework itself.
| Route | Typical cost (our estimate, 2026) | Note |
|---|---|---|
| Self-study from the framework publications | US$0 for members (core publications are a member benefit); publication purchase for non-members | The Introduction and Methodology and the Governance and Management Objectives volumes cover the Foundation syllabus |
| ISACA COBIT 2019 Foundation online course | Priced by ISACA; a six-month subscription with about five hours of content | The official self-paced route |
| Accredited training partner course, Foundation, 2–3 days | US$1,000 – $2,500 including the exam voucher in most packages | Classroom or virtual; ISACA lists accredited partners |
| Accredited course, Design & Implementation, 2–3 days | US$1,500 – $3,000 | Assumes Foundation held |
| ISACA membership (optional) | Around US$135 a year plus a chapter fee, varying by region | Exam prices are the same either way for COBIT; membership discounts publications and CPE |
| Individual total, Foundation via a training partner | US$1,200 – $2,700 | Exam plus course |
| Individual total, both certificates | US$2,900 – $5,800 | Two exams, two courses |
Training partner prices are market observations, not ISACA figures; confirm with the provider. The cheapest defensible route is membership, the publications and self-study for the US$175 exam.
ISACA does not certify enterprises against COBIT and does not accredit bodies to do so. A company that says it is “COBIT certified” has certified people or has had a consultancy assess it against the framework; neither is a certificate. What an organisation actually spends on is the governance system: the design, the implementation of the objectives in scope, and the assessment that measures capability. The figures below are our estimates for a first cycle — design through implementation phase 5 for a scope of roughly ten to fifteen objectives — and exclude the individual certificates above.
| Cost line | Small enterprise (50–250 FTE) | Mid-size (250–1,000 FTE) | Large or regulated (1,000+ FTE) |
|---|---|---|---|
| Governance system design (design factors workshop, goals cascade, targets) | $5,000 – $15,000 consultant, or 10–20 internal days | $15,000 – $40,000 | $40,000 – $100,000 |
| Capability assessment of objectives in scope | $5,000 – $15,000 | $15,000 – $40,000 | $40,000 – $120,000 |
| Documentation: framework manual, policies, process definitions, RACI, metrics | $5,000 – $15,000 or 20–40 internal days | $15,000 – $50,000 | $50,000 – $150,000 |
| Implementation of gaps (structures, tooling, training) — highly variable | $10,000 – $50,000 | $50,000 – $250,000 | $250,000 – $1,000,000+ |
| Individual certificates for the core team (3–8 people) | $3,600 – $8,000 | $6,000 – $20,000 | $10,000 – $40,000 |
| First-cycle total (our estimate) | $29,000 – $103,000 | $101,000 – $400,000 | $390,000 – $1,410,000 |
| Ongoing per year: reassessment, improvement cycle, CPE | $10,000 – $30,000 | $30,000 – $100,000 | $100,000 – $300,000 |
The implementation line dominates and is the one no framework guide can price: closing a gap in DSS05 security services can mean a policy or a security operations centre. The design and assessment lines are predictable and are where templates and a trained internal team compress the cost. Our guides to COBIT design factors and COBIT capability levels cover the two.
How much does COBIT certification cost?
For individuals: ISACA’s COBIT 2019 Foundation exam is US$175 and Design & Implementation US$275, members and non-members alike, with training from about US$1,000 to $3,000 per course if you use an accredited partner. For organisations there is no certificate; the cost is the governance system design and implementation, which we estimate at roughly $29,000–103,000 for a small enterprise’s first cycle.
Can a company be COBIT certified?
No. ISACA certifies individuals only. An organisation adopts COBIT by designing and implementing a governance system and can have its capability assessed, but no certificate is issued to enterprises.
Is COBIT 2019 Foundation still worth taking?
If the credential is needed before COBIT 7 exams are available, yes — but ISACA states the 2019 Foundation exam can be purchased only until 26 October 2026 and the certificate programme sunsets on 26 April 2027. Otherwise, wait for COBIT 7 Foundation from 27 October 2026.
Is the exam cheaper for ISACA members?
Not for COBIT: ISACA lists US$175 (Foundation) and US$275 (Design & Implementation) for both members and non-members. Membership discounts publications and provides CPE.
What does the Foundation exam involve?
Online, remotely proctored, two hours, 75 multiple-choice questions, 65% to pass, no prerequisite. Design & Implementation is three hours, 60 questions, 60% to pass, and requires Foundation.
Budget COBIT certification cost as two unrelated lines: a few hundred dollars per person for ISACA’s exams — bought before 26 October 2026 for the 2019 version or after 27 October 2026 for COBIT 7 — plus training if you want it; and a governance-system programme for the organisation that no certificate concludes, priced by the number of objectives in scope and the gaps the assessment finds.
The governance framework manual, the design and implementation guides, the capability assessment workbook and the document set for all five domains that compress the design and documentation lines are in the COBIT 2019 IT Governance Toolkit, or start with the free templates.
September 21, 2026
September 20, 2026
September 20, 2026
September 19, 2026
September 19, 2026