01 intro-cobit
- 2. References COBIT Student Book www.isaca.org/cobit Cobit Transforming Enterprise IT by ISACA, 2009
- 3. Why does IT need an IT control framework? What does Cobit do? How does Cobit support the governance of IT? Who needs an IT control framework? What are the benefits of implementing Cobit?
- 4. 2009 ISACA All Rights reserved. Is my information technology organisation doing the right things? Are we doing them the right way? Are we getting them done well? Are we getting the benefits? * * Based on the “Four Ares” as described by John Thorp in his book The Information Paradox, written jointly with Fujitsu, first published in 1998 and revised in 2003 COBIT answers Key Business Questions
- 5. Enterprises are sacrificing money, productivity and competitive advantage by not implementing effective IT governance Executives need a better way to: Direct IT for optimal advantage Measure the value provided by IT Manage IT-related risks 2009 ISACA All Rights reserved. Why does IT need a control framework ? IT Governance Is the Key Issue
- 6. What does COBIT do? Improves IT efficiency and effectiveness Helps IT understand the needs of the business Puts practices in place to meet the business needs as efficiently as possible Ensure alignment of business an IT Helps executives understand and manage IT investments throughout their life cycle
- 7. How does COBIT support the governance of IT? COBIT support IT governance by providing a framework to ensure that: IT is aligned with the business IT enables the business and maximizes benefits IT resources are used responsibly IT risks are managed appropriately
- 8. The benefits of implementing COBIT include: A common language for executives, management and ITprofessionals A better understanding of how the business and IT can work together for successful delivery of IT initiatives Improved efficiency and optimization of cost Reduced operational risk Clear policy development More efficient and successful audits Clear ownership and responsibilites, based on process orientation What are the benefits of implementing COBIT?
- 9. Board and Executive To ensure management follows and implements the strategic direction for IT Management To make IT investment decisions To balance risk and control investment To benchmark existing and future IT environment Users To obtain assurance on security and control of products and services they acquire internally or externally Auditors To substantiate opinions to management on internal controls To advise on what minimum controls are necessary Who needs a control framework?
- 10. Accepted globally as a set of tools that ensures IT is working effectively Functions as an overarching framework Provides common language to communicate goals, objectives and expected results to all stakeholders Based on, and integrates, industry standards and good practices in: Strategic alignment of IT with business goals Value delivery of services and new projects Risk management Resource management Performance measurement 2009 ISACA All Rights reserved. COBIT is a Road Map to Good IT Governance
- 11. The C OBI T Framework The C OBI T framework explained: Business focus Process orientation IT resources
- 12. Starts from the premise that IT needs to deliver the information that the enterprise needs to achieve its objectives Promotes process focus and process ownership Divides IT into 34 processes belonging to four domains and provides a high-level control objective for each Considers fiduciary, quality and security needs of enterprises, providing seven information criteria that can be used to generically define what the business requires from IT Is supported by a set of over 300 detailed control objectives Effectiveness Efficiency Availability Integrity Confidentiality Reliability Compliance Plan and Organise Acquire and Implement Deliver and Support Monitor and Evaluate C OBI T: Of what does it consist?
- 13. “ In order to provide the information that the organisation needs to achieve its objectives, IT resources need to be managed by a set of naturally grouped processes.” Relates to business requirements (expressed as information criteria) Links to business processes Empowers business owners Decomposes IT into four domains and 34 processes Domains: (plan-build-run) + monitor Control, audit, implementation and performance management knowledge structured by process Business Process Business Orientation and Process Focus
Editor's Notes
- #5: When we think about C OBI T and IT governance at the most fundamental level, there are four questions that every leader asks him or herself when it comes to IT initiatives: Is my IT organisation doing the right things? Are we doing them the right way? Are we getting them done well? Are we getting the benefits? Using the maturity models developed for each of C OBI T’s 34 IT processes, management can identify: • The actual performance of the enterprise—Where the enterprise is today • The current status of the industry—The comparison • The enterprise’s target for improvement—Where the enterprise wants to be • The required growth path between ‘as-is’ and ‘to-be’
- #6: IT governance goes a long way towards bridging the gap between corporate expectations and perceptions of the IT function. The need for top management direction and oversight regarding the value of IT and the management of IT-related risks are now understood as key elements of governance. Value, risk and control constitute the core of IT governance. IT governance consists of the leadership, organisational structures and processes that ensure that the enterprise’s IT sustains and extends the enterprise’s strategies and objectives. Governance is not the sole responsibility of the CIO; it is the responsibility of an enterprise’s top executives and board of directors. Successful enterprises understand the risks and exploit the benefits of IT and find ways to deal with: • Aligning IT strategy with the business strategy • Ensuring investors and stakeholders that a ‘standard of due care’ around mitigating IT risks is being met by the enterprise • Providing organisational structures that facilitate the implementation of strategy and goals • Measuring IT’s performance These are the benefits of sound IT governance.
- #11: The C OBI T mission is to research, continually update, publicise and promote an authoritative, internationally accepted IT governance control framework for adoption by enterprises and day-to-day use by business managers, IT professionals and assurance professionals. Now in its 4.1 release, the framework has been used successfully by IT organisations and business executives in many industries and of many sizes. C OBI T provides a common language to communicate goals, objectives and expected results. A common language benefits all levels of IT, including management and stakeholders.