Process Capability Attribute Indicators (PCAIs) Level 1 to ... · (COBIT, Val IT, Risk IT, BMIS...)...

COBIT 5Principles

1. Meeting Stakeholder

5. SeperatingGovernance

fromManagement

2. Covering theEnterpriseEnd-to-end

3. Applying aSingle

IntegratedFramework

4. Enabling aHolistic

Approach

Governance Objectives: Value Creation

BenefitsRealisation

ResourceOptimisation

RiskOptimisation

StakeholderNeeds

4. Culture, Ethicsand Behaviour

2. Processes 3. OrganizationalStructures

5. Information6. Services,

Infrastructureand Applications

7. People,Skills and

Competencies

Resources

1. Principles, Policies and Frameworks

Enablers

COBIT 5Principles

Value Creation

Principles, policies and frameworks are the

vehicle to translate the desired behaviour into practical guidance for

day-to-day management.

A process describes an organized set of practices and

activities to achieve certain objectives and produce a set of outputs in support of achieving

overall IT-related goals.

Organizational structures are the key decision-making

entities in an enterprise.

Culture, ethics and behaviour of individuals

and of the enterprise are very often underestimated

as a success factor in governance and

management activities.

Information is pervasive throughout any organization and includes all information produced and used by the enterprise. Information is required for keeping

the organization running and well governed, but at the operational level, information is very often the key

product of the enterprise itself.

Services, infrastructure and applications include the infrastructure, technology and applications that provide the enterprise with information

technology processes and services.

People, skills and competencies are linked to people

and are required for successful completion

of all activities and for making correct decisions and taking corrective actions.

Information Knowledge

Generate and ProcessBusiness Process

Transform Transform

Create

IT Processes

Information Cycle

Contextual Goals

RelevancyCompleteness

AppropriatenessConcisenessConsistency

UnderstandabilityEase of Manipulation

Assess

current

Recogniseneed toact

Monitor

evaluate

Sustain

Establish desireto change

implem

entation

Operate

and use

Identify roleplayers

Review

effectiveness

Initiate programme

Define problem

opportunities

Execute plan

Plan programme

ine ro

Programme management(outer ring)

Change enablement(middle ring)

Continual improvement life cycle(inner ring)

Level 5

Level 4

Level 3

Level 2

Level 1

Level 0

Process Dimension

PA5.2 Continuous optimizationPA5.1 Process innovationPA4.2 Process controlPA4.1 Process measurementPA3.2 Process deploymentPA3.1 Process definitionPA2.2 Performance managementPA2.1 Work product management

PA1.1 Process performanceBP : Base practices (Level 1)WP : Work products (Level 1)

GP : Generic Practice (Levels 2 to 5 only)GR : Generic Resource (Not defined)GWP : Generic Work Product (Levels 2 to 5 only)

EDM Evaluate, Direct,Monitor

APO Align Plan and Organize

BAI - Build, Acquire and Implement

DSS Deliver, Service andSupport

MEA Monitor, Evaluate & Assess

COBIT 5 Processes

Process AttributesLevel 1 to 5

Process Capability Attribute Indicators (PCAIs)Level 1 to 5

Process Performance Indicators

COBIT 5 PCAIs

Process Assessment Model

ImplementationLife Cycle

Governance ensures that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved; setting direction through prioritization and decision making; monitoring performance, compliance and

progress against agreed direction and objectives.

Management plans, builds, runs and monitors activities in alignment with the direction set by the governance body to achieve the enterprise objectives

COBIT is a registered trademark of the Information Systems Audit and Control Association (ISACA) and the IT Governance Institute (ITGI).NOT FOR RESALE, Version 2.3

Existing ISACAGuidance

(COBIT, Val IT,Risk IT, BMIS...)

- Current Guidance and Contents- Structure for Future Contents

COBIT 5 Knowledge Base

Content Filterfor Knowledge Base

COBIT 5 Product Family

COBIT 5

COBIT 5 OnlineCollaborativeEnvironment

COBIT 5 Professional Guides

COBIT 5 Enabler Guides

New ISACAGuidanceMaterials

OtherStandards

andFrameworks

Enablers providestructure to the

COBIT 5knowledge base

ServiceCapabilities

Skills andCompetencies

Principlesand Policies

Information

OrganizationalStructures

Culture,Ethics,

Behaviour

Processes

COBIT 5Enablers

SingleIntegratedFramework

COBIT 5 ImplementationCOBIT 5

for InformationSecurity

COBIT 5for Assurance

COBIT 5for Risk

Other ProfessionalGuides

Other EnablerGuides

COBIT 5:Enabling Information

COBIT 5:Enabling Processes

COBIT 5 Online Collaborative Environment

COBIT 5

COBIT 5 Enabler Guides

COBIT 5 Professional Guides

Product Family

BenefitsRealization

ResourceOptimization

RiskOptimization

Governance Objective: Value Creation

GovernanceEnablers

GovernanceScope

Roles, Activities and Relationships

Governance & Management

• Intrinsic Quality• Contextual Quality (Relevance, Effectiveness)• Accessibility and Security

• Plan• Design• Build/Acquire/ Create/Implement• Use/Operate• Evaluate/Monitor• Update/Dispose

• Practices• Work Products (Inputs/Outputs)

• Internal Stakeholders• External Stakeholders

Stakeholders Goals Life Cycle Good Practices

nt Are Stakeholders

Needs Addressed?Are Enabler

Goals Achieved?Is Life CycleManaged?

Are Good PracticesApplied?

Metrics for Achievement of Goals(Lag Indicators)

Metrics for Application of Practice(Lead Indicators)

Enablers: Generic

Management Feedback

Business Needs

Governance

Management

Evaluate

Direct Monitor

Plan(APO)

Build(BAI)

Run(DSS)

Monitor(MEA)

Align, Plan & Organise...

Build, Acquire & Implement...

Deliver, Service & Support

Processes for Management of Enterprise IT

Evaluate, Direct and Monitor

Processes for Governance of Enterprise IT

DSS01 ManageOperations

DSS03 ManageProblems

DSS04 ManageContinuity

DSS05 ManageSecurityServices

DSS06 ManageBusiness

Process Controls

DSS02 ManageService Requests

and Incidents

BAI01 ManageProgrammes and

Projects

BAI02 ManageRequirements

Definition

BAI03 ManageSolutions

Identificationand Build

BAI04 ManageAvailability

and Capacity

BAI05 ManageOrganizational

ChangeEnablement

BAI06 ManageChanges

BAI07 ManageChange

Acceptance andTransitioning

BAI08 ManageKnowledge

BAI09 ManageAssets

BAI010 ManageConfiguration

Monitor, Evaluate

and Assess

MEA01 Monitor,Evaluate and AssessPerformance and

Conformance

MEA02 Monitor,Evaluate and Assess

the System of InternalControl

MEA03 Monitor,Evaluate and AssessCompliance With

External Requirements

APO01 Managethe IT Management

Framework

APO02 ManageStrategy

APO03 ManageEnterprise

Architecture

APO04 ManageInnovation

APO05 ManagePortfolio

APO06 ManageBudget and Costs

APO07 ManageHuman Resources

APO08 ManageRelationships

APO09 ManageService

Agreements

APO10 ManageSuppliers

APO11 ManageQuality

APO12 ManageRisk

APO13 ManageSecurity

EDM01 EnsureGovernance

Framework Settingand Maintenance

EDM02 EnsureBenefits Delivery

EDM03 EnsureRisk Optimization

EDM04 EnsureResource

Optimization

EDM05 EnsureStakeholderTransparency

Key Areas

Process Reference Model (PRM)

Owners andStakeholders

Roles, Activities and Relationships

GoverningBody

ManagementOperations

andExecution

Instruct andAlign

ReportMonitor

Set Direction

Accountable

Delegate

Stakeholder Needs

BenefitsRealisation

ResourceOptimisation

RiskOptimisation

Cascade to

Influence

Stakeholder Drivers(Environment, Technology Evolution, ...)

Enterprise Goals

IT-related Goals

Enabler Goals

Cascade to

GoalsCascade

COBIT 5 Foundation Overviewproven experience • proven tactics • proven success

For more information:Call: Toll Free 1 866 616 4195

Email: Info@ServiceManagementArt.comCOBIT 5

Edition

Enterprise Goal COBIT 5 Processes

tifica

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17

IT-related GoalFinancial Customer Internal

Learning and

GrowthEvaluate, Direct and

Monitor Align, Plan and Organize Build, Acquire and Implement Deliver, Service and Support

Monitor, Evaluate and

Assess

01 Alignment of IT and business strategy P P S P S P P S P S P S S ð P P S S S P P P S P S P P S S P P S S S S S S

02IT compliance and support for business compliance with external laws and regulations

S P P ð S S S P S S S P P S S P S S S P S S P P

03Commitment of executive management for making IT-related decisions

P S S S S S P S S ð P S S S P S S S S S S S S S S S S

04 Managed IT-related business risk P S P S P S S S ð S P S S S S S S S S S S P S P P P S S S P S S S P P P P P P P P P

05 Realized benefits from IT-enabled investments of services portfolio P P S S S S P S S ð S P S S S P P P S S S P P S S S S S S S S S S S S

06 Transparency of IT costs, benefits and risk S S P S P P ð S P P S P S S P S S S P P S P S S S

er 07 Delivery of IT services in line with business requirements P P S S P S P S P S S S S ð P P S S P S P S S S S P P P P S S S P P P S P S S S P P P P S P P S S

08Adequate use of applications, information and technology solutions

S S S S S S S P S P S S ð S S S S S P S S S S S S S S S S S S P S P S S S S S S S S S S

09 IT agility S P S S P P S S S P ð S P P S P P S S S P S S S S S S S P S S S S S S

10Security and information, processing infrastructure and applications

P P P P ð S P S S S S S P P S P S S S S S S P S S S S

11 Optimization of IT assets, resources and capabilities P S S P S P S S S ð S S P P S P P S S P S S S S S S S P S S S P P P P S S S P

12Enablement and support of business processes by integrating applications and technology into business processes

S P S S S S P S S S S ð S S S S S S P P S S S P S S S S

13Delivery of programmes delivering benefits, on time, on budget, and meeting requirements and quality standards

P S S S S S P ð S S S S S S S P S P S S S P P P S S S P S S S

14 Availability of reliable and useful information for decision making S S S S P P S ð S S S S S S S S P S S S P S S P S S S S P S S P P S S S S

15 IT compliance with internal policies S S P ð S P S P S S S S S S S S S S S S S S S S S P P S

16Competent and motivated business andIT personnel

S S P S S P P S ð S S S P P S P S S S S S S S S S

17 Knowledge, expertise and initiatives for business innovation S P S P S S S S P ð S P S S S P P S P S P P S S S S S S S P S S P S S S S S S S S

COBIT 5 Goals Cascade

Primary Relationship

Secondary Relationship

Cascade to

Enterprise Goals

IT-related Goals

Process Goals

Process Capability Attribute Indicators (PCAIs) Level 1 to ... · (COBIT, Val IT, Risk IT, BMIS...)...

Documents

Transcript of Process Capability Attribute Indicators (PCAIs) Level 1 to ... · (COBIT, Val IT, Risk IT, BMIS...)...

A BAKERY MANAGEMENT INFORMATION SYSTEM (BMIS) CASE …

One Part ITIL, One Part COBIT · COBIT 5 Essentials Background 17 Earlier this year, ISACA completed the rollout from COBIT 4.1 to COBIT 5. COBIT 5 provides an end-to-end business

Cobit 4.1 vs Cobit 5

cobit artigo

CobiT CobiT CobiT CobiT CobiT CobiT CobiT CobiT , ITIL and ...

COBIT Overview

RCN BMIS EHNN Joint Event London February 2004

BMIS 373.01: Business System Analysis and Design

Exposicion COBIT

A COBIT 5 OverviewA COBIT 5 Overview - Information Technology

Table of Contents - isaca-nc-prod-cm.azurewebsites.net · COBIT 2019 and enterprise governance of information and technology (EGIT). The programs include: • The COBIT 2019 Foundation

Cobit v4.1

Cobit® 5 Comparação com Cobit® 4

COBIT 5 & COBIT 5 for Risk An overview - ISACA · • Cobit 5.0 SME Reviewer • Cobit for Risk development workshop and SME reviewer • Cobit for Risk Scenarios Guide Task Force

C i g COBIT4 1 Comparing COBIT4.1 and COBIT 5m.isaca.org/COBIT/Documents/Comparing-COBIT.pdfComparing COBIT 4.1 and COBIT 5 Abstract COBIT 5 integrates Risk IT, Val IT, BMIS and COBIT

COBIT 5 | Foundation - ITpreneurscampus.itpreneurs.com/itpreneurs/LPEngine/Cobit/Foundation/English… · — co COBIT 5 Process Mapping COBIT 5 IT-related Goals to Processes (Contd.)

COBIT 5 ISACA's new Framework for IT Governance, Risk ... COBIT 5.0 Framework.pdf · COBIT 5 ISACA’s new framework for IT Governance, Risk, ... COBIT 5© ISACA Mapping IT ... COBIT

COBIT Self-assessment Guide: Using COBIT 5

Cobit regulations

Cobit v5.0 BSC de TI con COBIT