Mapping COBIT to Additional Standards for Maximum Success

CIOs, CFOs, information security managers, auditors, and those involved in corporate and information technology (IT) governance are often overwhelmed by the many international standards and guidance for managing the IT function. COBIT Mapping: Overview of International Guidance, 2nd Edition, released by the nonprofit IT Governance Institute (ITGI), provides a global overview of the following important international standards and guidance for IT control and IT security in relationship to the recently updated COBIT 4.0 IT governance framework: COSO, ITIL, ISO/IEC 17799:2005, FIPS PUB 200, ISO/IEC TR 13335, ISO/IEC 15408:2005, PRINCE2, PMBOK, TickIT, CMMI, TOGAF 8.1, IT Baseline Protection Manual and NIST 800-14.

COBIT Mapping: Overview of International Guidance is a complimentary publication available at www.itgi.org. It provides a high-level comparison of the standards and serves as a road map to implementing guidance supporting IT governance. For each of the international standards/guidance examined, the document provides a classification, a short overview of the contents, the business drivers for implementing the guidance and the risks of noncompliance. More detailed mappings will be available later this year.

"There are several standards and sets of best practices that address the governance, management and control aspects of an organization`s IT. But only COBIT addresses the full spectrum of IT governance duties and IT management processes, and it has been kept continually harmonized with all major standards," said Erik Guldentops, advisor to ITGI. "These are two of the major reasons that COBIT is considered the `umbrella` framework for IT governance that is then supported by more specialized standards. Organizations can benefit by using the COBIT framework to integrate additional standards."

Trek to the summit

00Days

:

00Hrs

:

00Min

:

00Sec

COBIT (Control Objectives for Information and related Technology), issued by the IT Governance Institute, is internationally accepted as good practice for control over information, IT and related risks. Its guidance enables enterprises to implement effective IT governance programs that are pervasive throughout the organization. The most recent edition, COBIT 4.0, was released in December 2005 and is available as a complimentary download at www.itgi.org. COBIT case studies from organizations including Unisys and Sun Microsystems are available at www.isaca.org/cobitcasestudies.