Accountability Corbit Overview 06262007

CobiT 4.1 Information Technology Control Objectives & Control Practices John W. Beveridge Office of the State Auditor Enterprise Security Board Security Awareness Day June 26, 2007

[object Object],[object Object],CobiT

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],CobiT's Scope

Perspective on CobiT’s Control Definition Information Systems Need to Be Controlled ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Control ( as defined by COBIT ) ,[object Object]

To Achieve Business Objectives To Avoid Risks, Threats and Exposures Control (as defined by COBIT) The policies, procedures, practices and organizational structures designed to provide reasonable assurance that business objectives will be achieved and that undesired events will be prevented or detected and corrected. Source: COBIT Control Objectives. P. 12.

CobiT promotes a healthy understanding about “reasonable assurance” and “residual risk” Knowing the acceptable levels for reasonable assurance and residual risk is a critical success factor for designing and managing an adequate framework of control

Assurance Level 100% Residual Risk 0% Reasonable Assurance

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

IT Management ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

IT Management Issues ,[object Object],[object Object],[object Object],[object Object]

IT Value ,[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Need for IT Governance Control Framework

To Manage and Control IT, The Answer Lies In : ,[object Object],[object Object],[object Object],[object Object]

Organizations require a structured approach for managing these and other challenges. This will ensure that there are agreed objectives for IT, good management controls in place and effective monitoring of performance to keep on track and avoid unexpected outcomes. ,[object Object],Keeping IT Running Security Value/Cost Managing Complexity Aligning IT with Business Regulatory Compliance

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],PERFORMANCE MEASUREMENT RESOURCE MANAGEMENT RISK MANAGEMENT VALUE DELIVERY STRATEGIC ALIGNMENT www.itgi.org www.itgi.org

IT Governance Focus Areas ,[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],COBIT helps bridge the gaps between business risks, control needs and technical issues. It provides good practices across a domain and process framework and presents activities in a manageable and logical structure. IT resources need to be managed by a set of naturally grouped processes. C OBI T provides a framework that achieves this objective. ,[object Object]

CobiT is an Authoritative Source ,[object Object],[object Object],[object Object],[object Object]

Organisations will consider and use a variety of IT models, standards and best practices. These must be understood in order to consider how they can be used together, with COBIT acting as the consolidator (‘umbrella’). C OBI T ISO 9000 ISO 17799 ITIL COSO WHAT HOW ,[object Object],SCOPE OF COVERAGE

PERFORMANCE: Business Goals CONFORMANCE Basel II, Sarbanes- Oxley Act, etc. Enterprise Governance IT Governance ISO 9001:2000 ISO 17799 ISO 20000 Best Practice Standards QA Procedures Processes and Procedures Drivers C OBI T COSO Security Principles ITIL Balanced Scorecard ,[object Object]

COBIT Cube The COBIT framework describes how IT processes deliver the information that the business needs to achieve its objectives. For controlling this delivery, COBIT provides three key components, each forming a dimension of the COBIT cube. Business Requirements for Information Criteria IT Resources IT Processes

COBIT: Premise ,[object Object],[object Object],i IT Resources and Processes Information Business Processes Business Objectives provide to for achieving

IT Resource Management ,[object Object]

COBIT Domains : Information Processes (3rd Component) Feedback Feedback Feedback Plan and Organize Acquire and Implement Deliver and Support Monitor and Evaluate

CobiT is Easily Available ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Accountability Corbit Overview 06262007

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (15)

Ähnlich wie Accountability Corbit Overview 06262007

Ähnlich wie Accountability Corbit Overview 06262007 (20)

Mehr von Humberto Bruno Pontes Silva

Mehr von Humberto Bruno Pontes Silva (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Accountability Corbit Overview 06262007