In today’s global markets we are dependent on resources for survival as
well as expansion and growth through information technology. COBIT is an
IT governance framework for businesses wanting to implement, monitor
and improve IT management best practices, (Hanna, 2021). Mathenge and
Stevens-Hall (2020) stated in their report that COBIT is a leading
framework specific to governance and compliance which is much stronger
than ITIL in these areas, and the two work very well together. Guidance
was also provided on the roles and responsibilities for IT governance,
highlighting the parts played by the chief executive officer (CEO), business
executives, chief information officer (CIO), IT steering committee, IT
strategy committee, technology council and IT architecture review board,
(Antunes, 2014). COBIT has a framework of five principles and seven
aspects of governance to support its principles, (Hanna, 2021).
The five principles are:
Principle 1: Meeting Stakeholder Needs
Principle 2: Covering the Enterprise End-to-End
Principle 3: Applying a Single Integrated Framework
Principle 4: Enabling a Holistic Approach
Principle 5: Separating Governance from Management (Brook, 2020)
The seven aspects of governance are:
Quality Requirements:
– Effectiveness: Deals with information being relevant and pertinent to the
business process as well as being delivered in a timely, correct, consistent
and usable manner.
– Efficiency: Concerns the provision of information through the optimal
(most productive and economical) use of resources.
Security Requirements:
– Confidentiality: Concerns the protection of sensitive information from
unauthorized disclosure.
– Integrity: Relates to the accuracy and completeness of information, as
well as to its validity in accordance with business values and expectations.
– Availability: Relates to information being available when required by the
business process now and in the future. It also concerns the safeguarding of
necessary resources and associated capabilities.
Fiduciary Requirements:
– Compliance: Deals with complying with those laws, regulations, and
contractual arrangements to which the business process is subject, i.e.,
externally imposed business criteria, as well as internal policies.
– Reliability: Relates to the provision of appropriate information for
management to operate the entity and exercise its fiduciary and governance
responsibilities. (Modiri & Sheikhpour, 2012)
Our IT governance will be easier due to us being able to utilize several
frameworks. COBIT’s maturity model can help users assess the required
level of performance for an IT element to fulfill an organizational task,
(What Is COBIT?, 2021). c Please feel free to speak with me later if you may
seek an official certification within COBIT amongst our company.
(Hitesh, 2020)
References
Antunes, J. L. (2014). Overviews of Major ISACA Frameworks and Guidance
Integrated Into COBIT 5 Board Briefing on IT Governance. In
Word Press
.
https://janioantunes.files.wordpress.com/2014/02/17-overviews-isaca-
fws-gdnc-intgrtd-in-cobit5.pdf
Hanna, K. T. (2021, September).
What is a COBIT and why is it important?
SearchSecurity.
https://www.techtarget.com/searchsecurity/definition/COBIT
Hitesh. (2020, July 15).
What are Cobit 5 Enablers? - Comprehensive Guide
.
ACTE. https://www.acte.in/what-are-cobit-5-enablers
Mathenge, J., & Stevens-Hall, J. (2020, August 6).
What is ITIL 4? ITIL 4
Framework & Processes Explained
. BMC Blogs.
https://www.bmc.com/blogs/itil-4/
Modiri, N., & Sheikhpour, R. (2012, January).
An approach to map COBIT
processes to ISO/IEC 27001 information security management controls
.
ResearchGate.
https://www.researchgate.net/publication/292833500_An_approach_to_m
ap_COBIT_processes_to_ISOIEC_27001_information_security_management
_controls
What is COBIT?
(2021, May 27). Forcepoint.
https://www.forcepoint.com/cyber-edu/cobit
