Auditor

COBIT is a framework created by ISACA for information technology (IT) management and IT Governance. It is a supporting toolset that allows managers to bridge the gap between control requirements,technical issues and business risks.

Contents [hide]
1 Overview
2 COBIT Framework
3 Releases
4 Components
5 COBIT and Sarbanes Oxley
6 See also
7 References
8 Notes


[edit] OverviewCOBITwas first released in 1996, the current version, COBIT 4.1 was published in 2007 and is currently being updated (COBIT 5). Its mission is “to research, develop, publicize and promote an authoritative,up-to-date, international set of generally accepted information technology control objectives for day-to-day use by business managers, IT professionals and assurance professionals.”. [1]

COBITdefines 34 generic processes to manage IT. Each process is defined together with process inputs and outputs, key process activities, process objectives, performance measures and an elementary maturitymodel. The framework supports governance of IT by defining and aligning business goals with IT goals and IT processes.

[edit] COBIT FrameworkThe framework provides good practices across a domain andprocess framework. The business orientation of COBIT consists of linking business goals to IT goals, providing metrics and maturity models to measure their achievement, and identifying the associatedresponsibilities of business and IT process owners. The process focus of COBIT is illustrated by a process model that subdivides IT into four domains (Plan and Organize, Acquire and Implement, Deliverand Support and Monitor and Evaluate) and 34 processes in line with the responsibility areas of plan, build, run and monitor. It is positioned at a high level and has been aligned and harmonized withother, more detailed, IT standards and good practices as COSO, ITIL, ISO 27000, CMMI, TOGAF and PMBOK. COBIT acts as an integrator of these different guidance materials, summarizing key objectives...