COBIT

Question 1

What is COBIT?

Answer 1

The Control Objectives for Information and Related Technology (COBIT) provides managers, auditors, and IT users with a set of measures, indicators, processes, and best practices to maximize the benefit of information technology. The COBIT framework includes the following:
> Business Objectives
> Governance Objectives
> Information Criteria
> IT Resources
> Domains and Processes of COBIT
COBIT gives us an external framework that we consider in terms of what should an information and related technology should do. What is the overall purpose?

Question 2

What are the Business Objectives of COBIT?

Answer 2

These might include:
> Effective decision support
> Efficient transaction processing
> Compliance with reporting requirements or information security requirements

Question 3

What are the Governance Objectives?

Answer 3

It focus on 5 related areas related to IT governance:
> Strategic alignment
> Value delivery
> Resource management
> Risk management
> Performance measurement - how well it performs

Question 4

What are the 7 Information criteria of IT?

Answer 4

7 distinct criteria exist that describe the COBIT business requirements pertaining to information. The information criteria can be remembered using the mnemonic ICERACE, as follows:
I - Integrity
C - Confidentiality
E - Efficiency
R - Reliability
A - Availability
C - Compliance
E - Effectiveness

Question 5

What are the IT resources?

Answer 5

These consist of:
> applications, 
> information (input/output), 
> infrastructure, and 
> people.
The IT resources and the processes are referred to as the enterprise architecture for IT.

Question 6

What are the domains and processes of COBIT?

Answer 6

COBIT defines IT processes within the context of the following 4 domains, which direct the delivery of solutions and services and ensure the directions are followed:
PO AIDS ME
Plan and Organize - provides direction
Acquire and Implement - provides solutions to needs
Deliver and Support - provides services to users
Monitor an Evaluate - ensure directions are followed.