COBIT5-Introductionppt

Presentedby©2012ISACA.Allrightsreserved.Nopartofthispublicationmaybeused,copied,reproduced,modified,distributed,displayed,storedinaretrievalsystemortransmittedinanyformbyanymeans(electronic,mechanical,photocopying,recordingorotherwise)withoutthepriorwrittenauthorisationofISACA.Useofthispublicationispermittedsolelyforpersonaluseandmustincludefullattributionofthematerial’ssource.Nootherrightorpermissionisgrantedwithrespecttothiswork.2Information!Informationisakeyresourceforallenterprises.Informationiscreated,used,retained,disclosedanddestroyed.Technologyplaysakeyroleintheseactions.Technologyisbecomingpervasiveinallaspectsofbusinessandpersonallife.Whatbenefitsdoinformationandtechnologybringtoenterprises?4EnterpriseBenefitsEnterprisesandtheirexecutivesstriveto:Maintainqualityinformationtosupportbusinessdecisions.GeneratebusinessvaluefromIT-enabledinvestments,i.e.,achievestrategicgoalsandrealisebusinessbenefitsthrougheffectiveandinnovativeuseofIT.Achieveoperationalexcellencethroughreliableandefficientapplicationoftechnology.MaintainIT-relatedriskatanacceptablelevel.OptimisethecostofITservicesandtechnology.Howcanthesebenefitsberealisedtocreateenterprisestakeholdervalue?5StakeholderValueDeliveringenterprisestakeholdervaluerequiresgoodgovernanceandmanagementofinformationandtechnology(IT)assets.Enterpriseboards,executivesandmanagementhavetoembraceITlikeanyothersignificantpartofthebusiness.Externallegal,regulatoryandcontractualcompliancerequirementsrelatedtoenterpriseuseofinformationandtechnologyareincreasing,threateningvalueifbreached.COBIT5providesacomprehensiveframeworkthatassistsenterprisestoachievetheirgoalsanddelivervaluethrougheffectivegovernanceandmanagementofenterpriseIT.6TheCOBIT5FrameworkSimplystated,COBIT5helpsenterprisescreateoptimalvaluefromITbymaintainingabalancebetweenrealisingbenefitsandoptimisingrisklevelsandresourceuse.COBIT5enablesinformationandrelatedtechnologytobegovernedandmanagedinaholisticmannerfortheentireenterprise,takinginthefullend-to-endbusinessandfunctionalareasofresponsibility,consideringtheIT-relatedinterestsofinternalandexternalstakeholders.TheCOBIT5principlesandenablersaregenericandusefulforenterprisesofallsizes,whethercommercial,not-for-profitorinthepublicsector.7COBIT5Principles8Source:COBIT®5,figure2.©2012ISACA®Allrightsreserved.COBIT5Enablers9Source:COBIT®5,figure12.©2012ISACA®Allrightsreserved.GovernanceandManagementGovernanceensuresthatenterpriseobjectivesareachievedbyevaluatingstakeholderneeds,conditionsandoptions;settingdirectionthroughprioritisationanddecisionmaking;andmonitoringperformance,complianceandprogressagainstagreed-ondirectionandobjectives(EDM).Managementplans,builds,runsandmonitorsactivitiesinalignmentwiththedirectionsetbythegovernancebodytoachievetheenterpriseobjectives(PBRM).10InSummary…COBIT5bringstogetherthefiveprinciplesthatallowtheenterprisetobuildaneffectivegovernanceandmanagementframeworkbasedonaholisticsetofsevenenablersthatoptimisesinformationandtechnologyinvestmentanduseforthebenefitofstakeholders.11GovernanceofEnterpriseITCOBIT5ITGovernanceCOBIT4.0/4.1ManagementCOBIT3ControlCOBIT2AnbusinessframeworkfromISACA,at:NowOneCompleteBusinessFrameworkfor2005/720001998Evolutionofscope19962012ValIT2.0(2008)RiskIT(2009)13©2012ISACA®Allrightsreserved.COBIT5FrameworkCOBIT5:Themain,overarchingCOBIT5productContainstheexecutivesummaryandthefulldescriptionofalloftheCOBIT5frameworkcomponents:ThefiveCOBIT5principlesThesevenCOBIT5enablersplusAnintroductiontotheimplementationguidanceprovidedbyISACA(COBIT5Implementation)AnintroductiontotheCOBITAssessmentProgramme(notspecifictoCOBIT5)andtheprocesscapabilityapproachbeingadoptedbyISACAforCOBIT1415COBIT5ProductFamilySource:COBIT®5,figure11.©2012ISACA®Allrightsreserved.FiveCOBIT5PrinciplesThefiveCOBIT5principles:1.MeetingStakeholderNeeds2.CoveringtheEnterpriseEnd-to-end3.ApplyingaSingleIntegratedFramework4.EnablingaHolisticApproach5.SeparatingGovernanceFromManagement161.MeetingStakeholderNeedsPrinciple1.MeetingStakeholderNeedsEnterprisesexisttocreatevaluefortheirstakeholders.17Source:COBIT®5,figure3.©2012ISACA®Allrightsreserved.1.MeetingStakeholderNeeds(cont.)Principle1.MeetingStakeholderNeeds:Enterpriseshavemanystakeholders,and‘creatingvalue’meansdifferent—andsometimesconflicting—thingstoeachofthem.Governanceisaboutnegotiatinganddecidingamongstdifferentstakeholders’valueinterests.Thegovernancesystemshouldconsiderallstakeholderswhenmakingbenefit,resourceandriskassessmentdecisions.Foreachdecision,thefollowingcanandshouldbeasked:-Whoreceivesthebenefits?-Whobearstherisk?-Whatresourcesarerequired?181.MeetingStakeholderNeeds(cont.)Principle1.MeetingStakeholderNeeds:Stakeholderneedshavetobetransformedintoanenterprise’spracticalstrategy.TheCOBIT5goalscascadetranslatesstakeholderneedsintospecific,practicalandcustomisedgoalswithinthecontextoftheenterprise,IT-relatedgoalsandenablergoals.19Source:COBIT®5,figure4.©2012ISACA®Allrightsreserved.1.MeetingStakeholderNeeds(cont.)