All IT processes must be regularly evaluated in terms of their quality and adherence to monitoring requirements. This domain deals with performance management, monitoring of internal controls, adherence to regulations and guarantee of governance. It typically answers the following management questions:

• Is the performance of IT measured in order to identify problems before it is too late?
• Does the management ensure that internal controls are effective and efficient?
• Can the performance of IT be linked back to the corporate objectives?
• Is risk, control, compliance and performance measured and reports on this produced?