COBIT

COBIT
Control Objectives for Information and Related Technology (COBIT) is a framework created by ISACA for information technology (IT) management and IT governance. It is a supporting toolset that allows managers to bridge the gap between control requirements, technical issues and business risks.

Overview
COBIT was first released in 1996; the current version, COBIT 5, was published in 2012. Its mission is to research, develop, publish and promote an authoritative, up-to-date, international set of generally accepted information technology control objectives for day-to-day use by business managers, IT professionals and assurance professionals.. [1] COBIT, initially an acronym for 'Control objectives for information and related technology', defines a set of generic processes to manage IT. Each process is defined together with process inputs and outputs, key process activities, process objectives, performance measures and an elementary maturity model. The framework supports governance of IT by defining and aligning business goals with IT goals and IT processes.

The COBIT framework

The framework provides good practices across a domain and process framework. The business orientation of COBIT consists of linking business goals to IT goals, providing metrics and maturity models to measure their achievement, and identifying the associated responsibilities of business and IT process owners. The process focus of COBIT 4.1 is illustrated by a process model that subdivides IT into four domains (Plan and Organize, Acquire and Implement, Deliver and Support, and Monitor and Evaluate) and 34 processes in line with the responsibility areas of plan, build, run and monitor. It is positioned at a high level and has been aligned and harmonized with other, more detailed, IT standards and good practices such as COSO, ITIL, ISO 27000, CMMI, TOGAF and PMBOK. COBIT acts as an integrator of these different guidance materials, summarizing key objectives under one umbrella framework that link the good practice models with governance and business requirements. The COBIT 4.1 framework specification can be obtained as a complimentary PDF at the ISACA download website [2] . (Free self-registration may be required.) COBIT 5 was released in June 2012. [3] COBIT 5 consolidates and integrates the COBIT 4.1, Val IT 2.0 and Risk IT frameworks, and draws from ISACA's IT Assurance Framework (ITAF) and the Business Model for Information Security (BMIS). It aligns with frameworks and standards such as Information Technology Infrastructure Library (ITIL), International Organization for Standardization (ISO), Project Management Body of Knowledge (PMBOK), PRINCE2 and The Open Group Architecture Framework (TOGAF).

COBIT

Releases
COBIT has had five major releases: In 1996, the first edition of COBIT was released. In 1998, the second edition added "Management Guidelines". In 2000, the third edition was released. In 2003, an on-line version became available. In December 2005, the fourth edition was initially released. In May 2007, the current 4.1 revision was released. COBIT 5 was released in June 2012. It consolidates and integrates the COBIT 4.1, Val IT 2.0 and Risk IT frameworks, and also draws significantly from the Business Model for Information Security (BMIS) and ITAF.

Components
The COBIT components include: Framework: Organize IT governance objectives and good practices by IT domains and processes, and links them to business requirements Process descriptions: A reference process model and common language for everyone in an organization. The processes map to responsibility areas of plan, build, run and monitor. Control objectives: Provide a complete set of high-level requirements to be considered by management for effective control of each IT process. Management guidelines: Help assign responsibility, agree on objectives, measure performance, and illustrate interrelationship with other processes Maturity models: Assess maturity and capability per process and helps to address gaps. Other ISACA Publications [4] based on the COBIT framework include: Board Briefing for IT Governances, 2nd Edition COBIT and Application Controls COBIT Control Practices, 2nd Edition IT Assurance Guide: Using COBIT Implementing and Continually Improving IT Governance COBIT Quickstart, 2nd Edition COBIT Security Baseline, 2nd Edition IT Control Objectives for Sarbanes-Oxley, 2nd Edition IT Control Objectives for Basel II COBIT User Guide for Service Managers COBIT Mappings (to ISO/IEC 27002, CMMI, ITIL, TOGAF, PMBOK etc.) COBIT Online

COBIT

COBIT and Sarbanes-Oxley

Companies that are publicly traded in the US are subject to the Sarbanes-Oxley Act of 2002. According to the IIA, COBIT is one of the most commonly used frameworks to comply with Sarbanes-Oxley [5] .

References
ISACA [6] Custodians of COBIT COBITCampus [7] COBIT education provided by ISACA ISO/IEC 20000 international standard for IT Service Management ISO/IEC 27000 Information Security Management Systems standards Wood, David J. 2010. "Assessing IT Governance Maturity: The Case of San Marcos, Texas". Applied Research Projects, Texas State University-San Marcos. The Institute of Internal Auditors' List of most commonly used Internal Control Frameworks [8] http://ecommons.txstate.edu/arp/345 (This paper applies a modified COBIT framework to a medium sized city).

Notes
[1] ITGI. "COBIT 4.1 Executive Summary" (http:/ / www. isaca. org/ Knowledge-Center/ cobit/ Documents/ COBIT4. pdf). COBIT 4.1 Executive Summary. ITGI. . [2] http:/ / www. isaca. org/ Knowledge-Center/ cobit/ Pages/ Downloads. aspx [3] ISACA. [ISACA Issues COBIT 5 for Information Security "ISACA Issues COBIT 5 for Information Security"]. ISACA Issues COBIT 5 for Information Security. ISACA. ISACA Issues COBIT 5 for Information Security. [4] http:/ / www. isaca. org/ Knowledge-Center/ cobit/ Pages/ Products. aspx [5] IIA. "common internal control frameworks" (http:/ / www. theiia. org/ intAuditor/ media/ images/ Burch_dec'08_artok_cx. pdf). common internal control frameworks. IIA. . [6] http:/ / www. isaca. org/ [7] http:/ / www. isaca. org/ cobitcampus [8] http:/ / www. theiia. org/ intAuditor/ media/ images/ Burch_dec'08_artok_cx. pdf

Article Sources and Contributors

Article Sources and Contributors

COBIT Source: http://en.wikipedia.org/w/index.php?oldid=531983558 Contributors: Adrius42, Aeonx, Alan.rezende, Alanpc1, Alcmaeonid, Alejo2083, AlephGamma, AllanBz, Ash, Awillcox, Azimout, Binarygal, Camitommy, Canton Viaduct, Chowbok, Chrisco2005, CiudadanoGlobal, Cpaidhrin, Crazie 88, DanGalligan, David.T.Bath, David.t.bath, DiePerfekteWelle, Dogbertwp, Duke Ganote, Duncanrshannon, Dwandelt, Eccentric67, Face, Fedkad, Ferkelparade, FireballDWF2, Folajimi, Glen, Greyskinnedboy, Groovecoder, Hassan210360, Id027411, IvanLanin, Jamelan, Jef-Infojef, Jimmyheschl, Jordav, Kcordina, Kitdaddio, Kjohnrussell, Kku, Kpk.in, Kuru, Lachnej, LanceBarber, LeaveSleaves, LiDaobing, Lowzeewee, M.e, Manscher, MarkWahl, Mauls, MissionInn.Jim, Mitnick, Oliver Lineham, PSzczepanski, Paradox11, Pastore Italy, PaulHanson, Peterhgregory, Ps07swt, REDMBACISA, RHaworth, Reaper Eternal, Refalm, RichardVeryard, Robertbowerman, Ron Richard, Royce, SK ISACA, ST47, Silvrous, Smitbruc, Snori, Spartyguy32, Sspecter, StaticGull, Stefano.Ferroni, SueHay, Sumantra sarkar, Super-Magician, TScabbard, Ta bu shi da yu, The Thing That Should Not Be, Timotheos, Timothymoser, Vaceituno, Vashtihorvat, Xelgen, Xezbeth, Zaphod119, Zumbo, 298 anonymous edits

License
Creative Commons Attribution-Share Alike 3.0 Unported //creativecommons.org/licenses/by-sa/3.0/