Mapeo Iso17799 Y Cobit 4,0

®

Mapping of ISO/IEC 17799:2005 With COBIT® 4.0

COBIT MAPPING: MAPPING OF ISO/IEC 17799:2005 WITH COBIT 4.0

IT Governance Institute The IT Governance Institute (ITGI) (www.itgi.org) was established in 1998 to advance international thinking and standards in directing and controlling an enterprise’s information technology. Effective IT governance helps ensure that IT supports businessgoals, optimises business investment in IT, and appropriately manages IT-related risks and opportunities. ITGI offers electronic resources, original research and case studies to assist enterprise leaders and boards of directors in their IT governance responsibilities. Disclaimer ITGI (the ‘Owner’) and the author have designed and created this publication, titled COBIT ® Mapping: Mapping of ISO/IEC17799: 2005 With COBIT ® 4.0 (the ‘Work’) primarily as an educational resource for control professionals. The Owner makes no claim that use of any of the Work will assure a successful outcome. The Work should not be considered inclusive of all proper information procedures and tests or exclusive of other information, procedures and tests that are reasonably directed to obtaining the same results. Indetermining the propriety of any specific information, procedure or test, controls professionals should apply their own professional judgement to the specific control circumstances presented by the particular systems or information technology environment. Disclosure © 2006 IT Governance Institute. All rights reserved. No part of this publication may be used, copied, reproduced, modified,distributed, displayed, stored in a retrieval system or transmitted in any form by any means (electronic, mechanical, photocopying, recording or otherwise) without the prior written authorisation of ITGI. Reproduction of selections of this publication for internal, noncommercial or academic use only is permitted and must include full attribution of the material’s source. No other right or permission isgranted with respect to this work. Permission to reproduce sections of ISO/IEC 17799:2005, copyright 2005 the International Organization for Standardization (ISO), has been granted to ITGI by ISO. IT Governance Institute 3701 Algonquin Road, Suite 1010 Rolling Meadows, IL 60008 USA Phone: +1.847.590.7491 Fax: +1.847.253.1443 E-mail: info@itgi.org Web site: www.itgi.org

®

ISBN 1-9332284-78-1COBIT ® Mapping: Mapping of ISO/IEC 17799:2005 With COBIT ® 4.0 Printed in the United States of America

2

ACKNOWLEDGEMENTS

ACKNOWLEDGEMENTS
From the Publisher
IT Governance Institute wishes to recognise:
The Researcher Jimmy Heschl, CISA, CISM, KPMG, Austria Expert Reviewers David H. Barnett, CISM, CISSP, Applera Corporation, USA Serge Bédard, CISA, CISM, Régie des rentes du Québec,Canada Mustapha Benmahbous, Ph.D., CISM, DMR Consulting - a Fujitsu company, Canada Candi Carrera, Telindus PSF, Luxembourg Faisal R. Danka, CISA, CISM, CISSP, Ernst & Young LLP, UK Ray Daoud, CISSP, CGI Group Inc., Canada Luc De Clercq, Paradigma, Luxemburg Carlos A. Guichon, CISA, CIA, CPA (Uruguay), Canada and Ecuador Le Ha Hang, CISA, CISM, CISSP, CGI Group Inc., Canada Avinash Kadam, CISA, CISM,CBCP, CISSP, MIEL e-Security Pvt., Ltd., India Michel Lambert, CISA, CISM, Commission administrative des régimes de retraites et d’assurances (Québec), Canada Patrice Monette, CISSP, CISA, CISM, CGI group Inc., Canada Luc Poulin, M.Sc, CISA, CISSP-ISSMP, Institut de sécurité de l'information du Québec, Canada Pierre Sasseville, CISA, CISM, Ministère des Services gouvernementaux (Québec), CanadaITGI Board of Trustees Everett C. Johnson, CPA, Deloitte & Touche (retired), USA, International President Georges Ataya, CISA, CISM, CISSP, Solvay Business School, Belgium, Vice President William C. Boni, CISM, Motorola, USA, Vice President Lucio Augusto Molina Focazzio, CISA, Colombia, Vice President Avinash Kadam, CISA, CISM, CBCP, CISSP, Miel e-Security Pvt. Ltd., India, Vice President...