Introduction to COBIT | ||||||||||||
 |
|
|
|
|
|
|
|
|
|
|
|
|
 |
||||||||||||
 |
[ Login/Subscribe ] | |||||||||||
 |
||||||||||||
 |
 |
 |
 |
 |
 |
 |
|
 |
||||
 |
||||||||||||
Features
Departments
Executive
Resources
|
Home > Executive Report > Tools
An overview of the COBIT framework, which takes a top-down approach to IT governance with emphasis on four PPM-related areas: planning and organization; acquisition and implementation; delivery and support; and monitoring and evaluation.
In the quest for a practical framework for IT governance and control, the Information Systems Audit and Control Association and the IT Governance Institute created the Control Objectives for Information and Related Technology (COBIT) in 1996 for IT. Four editions have been published since November 2005, with the most recent incremental release, 4.1, featuring streamlined control objectives and application controls, improved process controls, and an enhanced explanation of performance management.
COBIT has been rapidly adopted across major organizations, particularly in the United States, where it assists in Sarbanes-Oxley compliance, and Europe. The framework bridges the gap between risks, control needs and technical implementation approaches. It provides a processes-oriented structure classified by domain, which identifies the resources to be leveraged, defines the control objectives to be considered, and incorporates major international standards.
COBIT outlines 34 high-level objectives that cover multiple sub-objectives across four domains:
Planning and Organization – Defining the strategic IT plan and information architecture; determining the technology direction; defining the processes organization and relationships; managing the investment; communicating the direction; managing the human resources; and managing risk issues and projects.
Acquisition and Implementation – Identifying and acquiring solutions, software and technology; enabling operation and use; procuring resources; managing changes and accrediting the solutions and changes to them.
Delivery and Support – Defining and managing service levels, third-party services, and performance and capacity; ensuring continuous service and security; identifying and allocating costs; managing the service desk and incidents; managing problems, data, configurations, and the physical environment and operations.
Monitoring and Evaluation – Monitoring and evaluating performance and internal control; ensuring regulatory compliance; and providing IT governance.
The framework focuses on what needs to be done, rather than providing prescriptive guidelines on how to achieve objectives.
Please login/register to read the entire article.
| |||||||||||||||||
|
Privacy Policy Contact Us User Agreement