Modul-4 Enabling Processes COBIT 5
Modul-4 Enabling Processes COBIT 5
A Business Framework for
the Governance and
Management of Enterprise
IT
ENABLING PROCESSES
1
COBIT 5: Enabling
Processes
COBIT 5: Enabling Processes
COBIT 5: Enabling Processes complements COBIT 5
and contains a detailed reference guide to the
processes that are defined in the COBIT 5 process
reference model:
In Chapter 2, the COBIT 5 goals cascade is
recapitulated and complemented with a set of example
metrics for the enterprise goals and the IT-related goals.
In Chapter 3, the COBIT 5 process model is explained
and its components defined.
Chapter 4 shows the diagram of this process reference
model.
Chapter 5 contains the detailed process information for
all 37 COBIT 5 processes in the process reference
model.
© 2012 ISACA. This work, and any derivatives thereof, may not be offer for sale alone or as part any other publication or product.
3
COBIT 5: Enabling Processes (cont.)
4
COBIT 5: Enabling Processes (cont.)
6
Details on COBIT Processes
Part 1: Process Description and Purpose
Part 2: Goals and Metrics
Part 3: RACI chart
• R(esponsible)—Who is getting the task done? This refers to the roles taking the main operational stake in fulfilling the
activity listed and creating the intended outcome
• A(ccountable)—Who accounts for the success of the task? This assigns the overall accountability for getting the task
done (Where does the buck stop?)
• C(onsulted)—Who is providing input? These are key roles that provide input.
• I(nformed)—Who is receiving information? These are roles who are informed of the achievements and/or deliverables
of the task.
Part 4: Process Practices
• Governance Practice & Management Practice
For each COBIT 5 process, the governance/management practices provide a complete set of high-level
requirements for effective and practical governance and management of enterprise IT.
They are:
Statements of actions to deliver benefits, optimise the level of risk and optimise the use of
resources
Aligned with relevant generally accepted standards and good practices
Generic and therefore needing to be adapted for each enterprise
Covering business and IT role players in the process (end to end)
Part 5: Activities
Part 6: Related Guidance
COBIT 5 Implementation
COBIT 5 Implementation
• The improvement of the governance of enterprise IT (GEIT)
is widely recognised by top management as an essential part
of enterprise governance.
• Information and the pervasiveness of information
technology are increasingly part of every aspect of business
and public life.
• The need to drive more value from IT investments and
manage an increasing array of IT-related risk has never been
greater.
• Increasing regulation and legislation over business use of
information is also driving heightened awareness of the
importance of a well-governed and managed IT
environment.
15
COBIT 5 Implementation (cont.)
• ISACA has developed the COBIT 5 framework to help
enterprises implement sound governance enablers.
Indeed, implementing good GEIT is almost impossible
without engaging an effective governance framework.
Best practices and standards are also available to underpin
COBIT 5.
• Frameworks, best practices and standards are useful only
if they are adopted and adapted effectively. There are
challenges that need to be overcome and issues that need
to be addressed if GEIT is to be implemented
successfully.
• COBIT 5: Implementation provides guidance on how
to do this.
16
COBIT 5 Implementation (cont.)
17
COBIT 5 Implementation (cont.)
20
COBIT 5 Future Supporting Products
Future supporting products:
• Professional Guides:
• COBIT 5 for Information Security
• COBIT 5 for Assurance
• COBIT 5 for Risk
• Enabler Guides:
• COBIT 5: Enabling Information
• COBIT Online Replacement
• COBIT Assessment Programme:
• Process Assessment Model (PAM): Using COBIT 5
• Assessor Guide: Using COBIT 5
• Self-assessment Guide: Using COBIT 5
21
Terima Kasih
22
23