COBIT®

CFN People have practical experience in the use of the COBIT® framework to apply Governance control and assurance. We have been working with integration of the COBIT® framework and its controls with the processes from ITIL to obtain the best possible controls for a given ITIL process. So adding COBIT® Controls to the ITIL processes gives you IT Governance of your processes.

The Control Objectives for Information and related Technology (COBIT®) is a set of best practices for IT management created by the Information Systems Audit and Control Association (ISACA), and the IT Governance Institute (ITGI) in 1992. COBIT® provides managers, auditors, and IT users with a set of generally accepted measures, indicators, processes and best practices to assist them in maximizing the benefits derived through the use of IT and developing appropriate IT governance and control in a company.

COBIT® represents a collection of documents that can be classified as generally accepted best practice for IT governance, control and assurance. The goal is to research, develop, publizise and promote an authoritative, up-to-date, international set of generally accepted information technology control objectives for day-to-day use by business managers, IT professionals and assurance professionals.

COBIT® supports IT governance by providing a framework to ensure that:

IT is aligned with the business
IT enables the business and maximises benefits
IT resources are used responsibly
IT risks are managed appropriately

COBIT® is usually implemented subject to one or more of the following business cases:

There is a need for IT governance
Services delivered by IT are to be aligned with business goals
IT processes are to be standardized/automated
A framework for overall IT processes is needed
IT processes are to be unified
A framework is needed for a quality management system for IT
A structured audit approach is to be defined
Mergers and acquisitions are occurring with an IT impact
IT cost-control initiatives are desired
Part or all of the IT function is to be outsourced
Compliance with external requirements (e.g., regulators, organisations or third parties) is of concern
Important changes in an organisation, its business goals and processes affect IT