Integrating Psychological Safety into COBIT 2019: A New Horizon in I&T Governance

Luiz Claudio Diogo
Author: Luiz Claudio Diogo Reis, CISA, CRISC, CDPSE, COBIT 5 & 2019 Certified
Date Published: 21 October 2024
Read Time: 3 minutes

In a world increasingly driven by technology, organizations must balance the need for innovation and efficiency with the well-being of their employees. Success is no longer just about financial performance or securing information systems; it also involves creating a work environment where employees feel safe to express their ideas, take risks and collaborate without fear of retaliation.

This article introduces Psychological Safety as a critical emerging Focus Area within the COBIT 2019 framework. By incorporating psychological safety into I&T governance, organizations can create healthy, resilient environments that promote both business success and employee well-being. In the following sections, we’ll explore how to integrate Psychological Safety into COBIT 2019’s governance and management systems.

Overview of COBIT 2019 Governance Components

COBIT 2019 is a globally recognized framework developed by ISACA, designed to help organizations manage and govern their I&T resources effectively. It offers a structured, holistic approach that can be applied across organizations of all sizes and sectors, aligning their I&T and business goals.

The framework includes 40 Governance and Management Objectives, grouped into five domains:

  1. EDM: Evaluate, Direct, and Monitor
  2. APO: Align, Plan, and Organize
  3. BAI: Build, Acquire, and Implement
  4. DSS: Deliver, Service, and Support
  5. MEA: Monitor, Evaluate, and Assess

In addition, COBIT 2019 outlines seven Governance System Components:

  1. Principles, Policies, and Frameworks
  2. Processes
  3. Organizational Structures
  4. Culture, Ethics, and Behavior
  5. Information
  6. People, Skills, and Competencies
  7. Services, Infrastructure, and Applications

By tailoring these components to an organization’s specific goals, COBIT 2019 provides a flexible governance system that can be adapted to emerging focus areas, such as Psychological Safety.

Psychological Safety in Organizations

Psychological Safety refers to a shared belief among team members that the work environment is safe for interpersonal risk-taking - such as expressing divergent opinions, admitting mistakes and proposing new ideas. In environments where psychological safety is prioritized, employees feel more comfortable speaking up, which encourages innovation and the challenging of the status quo.

From an I&T governance perspective, psychological safety is crucial. IT professionals in organizations with high psychological safety can report technical problems, security vulnerabilities and other risks without fear of retaliation, strengthening organizational resilience and improving risk management.

Aligning Psychological Safety with COBIT 2019 Governance Systems

While COBIT 2019 does not explicitly address Psychological Safety, its Governance System Components can be adapted to incorporate it. Below Table 1 aligns Psychological Safety with COBIT’s seven governance components. 

Table 1: Psychological Safety Aligned with COBIT 2019 Governance System

COBIT 2019 Governance System Component Psychological Safety Alignment
Principles, Policies, and Frameworks Develop policies that promote open communication and protect employees from retaliation for raising concerns.
Processes Integrate guidelines into operational practices to ensure employees feel safe reporting concerns.
Organizational Structures Establish clear roles and responsibilities that foster inclusion and emotional support.
Culture, Ethics, and Behavior Build a culture of respect, transparency and well-being.
Information Protect the confidentiality and integrity of employee data.
People, Skills, and Competencies Provide training that enhances interpersonal skills and promotes psychological safety.
Services, Infrastructure, and Applications Design technical systems that facilitate anonymous feedback and transparent communication.

COBIT 2019 Governance and Management Objectives

Psychological safety plays an essential role in achieving COBIT 2019’s Governance and Management Objectives. Fostering an environment where employees feel safe to express concerns and ideas can enhance the effectiveness of these objectives. Below in Table 2 are 10 key COBIT 2019 objectives that strongly align with Psychological Safety.

Table 2: COBIT 2019 Objectives Aligned with Psychological Safety

COBIT 2019 Governance or Management Objective Psychological Safety Connection
EDM01 - Ensured Governance Framework Setting and Maintenance Establishing a clear governance framework supports psychological safety by ensuring defined roles and responsibilities.
EDM03 - Ensured Risk Optimization Psychological safety allows for open discussions about risks, leading to better identification and mitigation.
APO01 - Managed I&T Management Framework Including psychological safety ensures employees feel safe to express concerns, improving governance.
APO07 - Managed Human Resources HR management plays a direct role in promoting employee well-being and psychological safety.
APO08 - Managed Relationships Psychological safety fosters trust and openness, which are essential for effective relationship management.
APO11 - Managed Quality Encouraging employees to report issues without fear leads to continuous improvement in quality.
APO12 - Managed Risk Effective risk management requires a safe environment where employees can report risks and failures.
DSS01 - Managed Operations Psychological safety encourages proactive problem-solving in operations management.
DSS02 - Managed Service Requests and Incidents A safe environment for employees encourages timely reporting of incidents, improving service management.
MEA02 - Managed System of Internal Control Internal control systems are strengthened by psychological safety, fostering transparency and accountability.

Benefits of Integrating Psychological Safety with COBIT 2019

Using COBIT 2019 to integrate psychological safety into governance offers several advantages:

  • Structured approach: COBIT 2019 provides a clear structure for embedding psychological safety into governance practices.
  • Alignment with organizational goals: Psychological safety initiatives can be aligned with broader business objectives, ensuring they contribute to organizational success.
  • Improved risk management: Open communication fostered by psychological safety leads to better risk identification and mitigation.
  • Enhanced collaboration and innovation: Employees in psychologically safe environments are more likely to share ideas and challenge assumptions, driving innovation.
  • Sustainable cultural change: Psychological safety helps create lasting cultural improvements that prioritize employee well-being.
  • Increased employee retention: Prioritizing psychological safety can boost employee satisfaction and retention.
  • Better decision-making: Diverse perspectives, encouraged in a psychologically safe environment, lead to more informed decision-making.

Metrics and Indicators

To measure the effectiveness of integrating psychological safety with COBIT 2019, clear metrics are necessary. Below are five proposed indicators:

  1. Employee feedback engagement rate: Percentage of employees participating in psychological safety feedback surveys.
  2. Incident reporting frequency: Number of reported incidents related to psychological safety.
  3. Psychological Safety Index (PSI): A composite score of employee perceptions of psychological safety.
  4. Turnover rate related to psychological safety: Percentage of employee turnover linked to psychological safety concerns.
  5. Training completion rate: Percentage of employees completing psychological safety and emotional intelligence training.

A Roadmap for Success

By adopting Psychological Safety as a Focus Area within COBIT 2019, organizations can enhance both the effectiveness of their I&T governance and the well-being of their employees.

COBIT 2019’s flexibility allows for the inclusion of emerging focus areas, such as Psychological Safety, making it a powerful tool for securing both operational efficiency and employee satisfaction.

Integrating Psychological Safety into governance practices helps organizations better navigate future challenges and ensures both their systems and their people are equipped for success.