COBIT Framework for IT Governance

COBIT Framework Overview

What is COBIT?

COBIT (Control Objectives for Information and Related Technologies) is a framework developed by ISACA for IT governance and management. The latest version, COBIT 2019, builds on previous versions with updated guidance.

Core Components

Governance Objectives

1. Evaluate, Direct and Monitor (EDM)
   • EDM01: Ensured Governance Framework
   • EDM02: Ensured Benefits Delivery
   • EDM03: Ensured Risk Optimization
   • EDM04: Ensured Resource Optimization
   • EDM05: Ensured Stakeholder Engagement

Management Objectives

Align, Plan and Organize (APO)

• Enterprise architecture
• Innovation management
• Portfolio management
• Budget and costs
• Human resources
• Relationships
• Service agreements
• Vendors
• Quality management
• Risk management
• Security management
• Data management

Build, Acquire and Implement (BAI)

• Program management
• Requirements definition
• Solutions identification
• Availability and capacity
• Change enablement
• Change acceptance
• Knowledge management
• Assets management
• Configuration management
• Projects management

Deliver, Service and Support (DSS)

• Operations management
• Service requests and incidents
• Problems management
• Continuity management
• Security services
• Business process controls

Monitor, Evaluate and Assess (MEA)

• Performance management
• Internal controls
• External compliance
• Assurance

Design Factors

• Enterprise strategy
• Enterprise goals
• Risk profile
• I&T-related issues
• Threat landscape
• Compliance requirements
• Role of IT
• Sourcing model
• IT implementation methods
• Technology adoption strategy
• Enterprise size

Implementation Approach

1. Establish the desire to change
2. Form an implementation team
3. Define opportunities and roadmap
4. Plan the program
5. Execute the plan
6. Release and operate
7. Sustain