The transition from a divisional model to a centralized model of IT governance and management requires an increase in capability levels. This is because the transition requires an integration of IT systems and processes across the enterprise, which requires a greater level of expertise, organization, and coordination. Additionally, the adoption of outsourcing increases the complexity of the IT environment, requiring a higher level of understanding of the capabilities of the various vendors and contractors being used. Increased capability levels are required to ensure that the organization can adequately manage the transition and maintain the necessary level of control over the IT environment. For more information, please refer to the Isaca COBIT 2019 official Manual or book.

According to the COBIT 2019 Study Manual from Isaca, the most appropriate level of threat landscape for an enterprise in the health care sector is a high level. This is due to the sensitive nature of the data and services provided by health care entities, which means organizations in this sector must take extra measures to ensure the security of their systems and data. For organizations in the health care sector, a high level of threat landscape should be adopted when tailoring a governance system to meet the specific security requirements of the organization.