Cobit Framework - International Institute of Information COBIT框架-国际信息研究所.ppt

Cobit Framework Introduction What is COBIT? Control OBjectives for Information and related Technologies Businesses use IT but do not understand it or manage it properly. Cobit is a control framework that achieves the following Links to business requirements Organizes IT activities into a general process model Identifies major IT resources to be leveraged Defines management control objectives that need to be considered Management Goals Business objectives are achieved Undesired events are prevented or detected and corrected A measure of where the organization stands and how it can be improved Cobit Defines Benchmarking guidelines Goals and metrics Activity goals Cobit Products Executive management and boards Business and IT management Governance, assurance, control and security professionals Governance, Assurance and Security Professionals Framework—Explaining how COBIT organizes IT governance objectives and best practices by IT domains and processes, and links them to business requirements Control objectives—Providing generic best practice management objectives for all IT activities Control Practices—Providing guidance on why controls are worth implementing and how to implement them IT Assurance Guide—Providing a generic audit approach and supporting guidance for audits of all COBIT’s IT processes IT Control Objectives for Sarbanes-Oxley—Providing guidance on how to ensure compliance for the IT environment based on the COBIT control objectives Governance, Assurance and Security Professionals IT Governance Implementation Guide—Providing a generic road map for implementing IT governance using the COBIT resources and a supporting tool kit COBIT Quickstart —Providing a baseline of control for the smaller organisation and a possible first step for the larger enterprise COBIT Security Baseline —Focusing the organization on essential steps for implementing information security within the enterprise Cobit implementation is supported by several products, refer: /cobit