it proses cobit 2

COBIT Control Objectives
10.2	Project management framework
10.3	Project management approach
10.4	Stakeholder commitment
10.5	Project scope statement
10.6	Project phase initiation
10.7	Integrated project plan
10.8	Project resources
10.9	Project risk management
10.10	Project quality plan
10.11	Project change control
10.12	Project planning of assurance method
10.13	Project performance measurement, reporting, and monitoring
10.14	Project closure
Acquire and Implement
AI1	Identify automated solution
1.1	Definition and maintenance of business functional and technical requirements
1.2	Risk analysis report
1.3	Feasibility study and formulation of alternative courses of action
1.4	Requirement and feasibility decision and approval
AI3	Acquire and maintain technology infrastructure
3.1	Technological infrastructure acquisition plan
3.2	Infrastructure resource protection and availability
3.3	Infrastructure maintenance
3.4	Feasibility test environment
AI4	Enable operation and use
4.1	Planning for operational solutions
4.2	Knowledge transfer to business management
4.3	Knowledge transfer to end users
4.4	Knowledge transfer operations and support staff
AI5	Procure IT resources
5.1	Procurement control
5.2	Supplier contract management
5.3	Supplier selection
5.4	IT resources acquisition
AI6	Manage changes
6.1	Change standard and procedures
6.2	Impact assessment, prioritization and authorization
6.3	Emergency changes
6.4	Change status tracking and reporting
6.5	Change closure and documentation
AI7	Install and accredit solution and changes
7.1	Training
7.2	Test plan
7.3	Implementation plan
7.4	Test environment
7.5	System and data conversion

Continue Reading

IT proses cobit 1

Dari setiap COBIT IT process terdapat detailed control objectives yang merupakan alat kontrol dari IT process itu sendiri. Berdasarkan penelitian yang dilakukan ditemukan 137 detailed control objective sebagai berikut

COBIT Control Objectives
Plan and organize
PO1	Define Strategic IT Plan
1.1	IT value management
1.2	Business IT alignment
1.3	Assesment of current capability and performance
1.4	IT strategic plan
1.5	IT tactical Plans
1.6	IT Portfolio management
PO2	Define the information architecture
2.1	Enterprise information architecture model
2.2	Enterprise data dictionary and data syntax rules
2.3	Data classification scheme
2.4	Integrity management
PO3	Determine technological direction
3.1	Technological direction planning
3.2	Technology infrastructure plan
3.3	Monitor future trends and regulation

3.4	Technology standard
3.5	IT architecture board
PO4	Define IT process, organization and relationship
4.1	IT process framework
4.2	IT strategy committee
4.3	IT steering committee
4.4	Organizational placement of the IT function
4.5	IT organizational structure
4.6	Establishment of roles and responsibility
4.7	Responsibility for IT quality assurance
4.8	Responsibility for risk, security and compliance
4.9	Data and system ownership
4.10	Supervision
4.11	Segregation of duties
4.12	IT staffing
4.13	Key IT personal
4.14	Contracted staff policies and procedure
4.15	Relationship
PO5	Manage IT investment
5.1	Financial management framework
5.2	Prioritization within IT Budget
5.3	IT budgeting
5.4	Cost management
5.5	Benefit management
PO6	Communicate management aims and direction
6.1	IT policy and control environment
6.2	Enterprise IT risk and control framework
6.3	IT polices management
6.4	Polices, standard and procedures roll out
6.5	Communication of IT objectives and direction
PO7	Manage IT human Resources
7.1	Personnel recruitment and retention
7.2	Personnel competencies
7.3	Staffing roles
7.4	Personnel training
7.5	Dependence upon individual
7.6	Personnel clearance procedures
7.7	Employee job performance evaluation
7.8	Job change and termination
PO8	Manage quality
8.1	Quality management system
8.2	IT standards and quality practices
8.3	Development and acquisition standards
8.4	Customer focus
8.5	Continuous improvement
8.6	Quality measurement, monitoring and review
PO10	Manage project

Continue Reading