|
COBIT
Control Objectives
|
|
|
7.7
|
Final
acceptance test
|
|
7.8
|
Promotion
to production
|
|
7.9
|
Post
implementation review
|
|
Deliver
and Support
|
|
|
DS1
|
Define
and manage service level
|
|
1.1
|
Service
level management framework
|
|
1.2
|
Definition
of services
|
|
1.3
|
Service
level agreements
|
|
1.4
|
Operating
level agreements
|
|
1.5
|
Monitoring
and reporting of service level achievements
|
|
1.6
|
Review
of services agreements and contracts
|
|
DS2
|
Manage
third-party services
|
|
2.1
|
Identification
of all supplier relationship
|
|
2.2
|
Supplier
relationship management
|
|
2.3
|
Supplier
risk management
|
|
2.4
|
Supplier
performance monitoring
|
|
DS3
|
Manage
performance and capacity
|
|
3.1
|
Performance
and capacity planning
|
|
3.2
|
Current
performance and capacity
|
|
3.3
|
Future
performance and capacity
|
|
3.4
|
IT
resources availability
|
|
3.5
|
Monitoring
and reporting
|
|
DS4
|
Ensure
continuous service
|
|
4.1
|
IT
continuity framework
|
|
4.2
|
IT
continuity plans
|
|
4.3
|
Critical
IT resources
|
|
4.4
|
Maintenance
of the IT continuity plan
|
|
4.5
|
Testing
of the IT continuity plan
|
|
4.6
|
IT
continuity plan training
|
|
4.7
|
Distribution
of the IT continuity plan
|
|
4.8
|
IT
services recovery and resumption
|
|
4.9
|
Offsite
backup storage
|
|
4.10
|
Post-resumption
review
|
|
DS6
|
Identify
and allocate costs
|
|
6.1
|
Definition
of services
|
|
6.2
|
IT
accounting
|
|
6.3
|
Cost
modeling and charging
|
|
6.4
|
Cost
model maintenance
|
|
DS7
|
Educate
and train users
|
|
7.1
|
Identification
of education and training users
|
|
7.2
|
Delivery
of training and education
|
|
7.3
|
Evaluation
of training received
|
|
DS8
|
Manage
service desk and incidents
|
|
8.1
|
Service
desk
|
|
8.2
|
Registration
of customer queries
|
|
8.3
|
Incident
escalation
|
|
8.4
|
Incident
closure
|
|
COBIT
Control Objectives
|
|
|
10.2
|
Project
management framework
|
|
10.3
|
Project
management approach
|
|
10.4
|
Stakeholder
commitment
|
|
10.5
|
Project
scope statement
|
|
10.6
|
Project
phase initiation
|
|
10.7
|
Integrated
project plan
|
|
10.8
|
Project
resources
|
|
10.9
|
Project
risk management
|
|
10.10
|
Project
quality plan
|
|
10.11
|
Project
change control
|
|
10.12
|
Project
planning of assurance method
|
|
10.13
|
Project
performance measurement, reporting, and monitoring
|
|
10.14
|
Project
closure
|
|
Acquire
and Implement
|
|
|
AI1
|
Identify
automated solution
|
|
1.1
|
Definition
and maintenance of business functional and technical
requirements
|
|
1.2
|
Risk
analysis report
|
|
1.3
|
Feasibility
study and formulation of alternative courses of action
|
|
1.4
|
Requirement
and feasibility decision and approval
|
|
AI3
|
Acquire
and maintain technology infrastructure
|
|
3.1
|
Technological
infrastructure acquisition plan
|
|
3.2
|
Infrastructure
resource protection and availability
|
|
3.3
|
Infrastructure
maintenance
|
|
3.4
|
Feasibility
test environment
|
|
AI4
|
Enable
operation and use
|
|
4.1
|
Planning
for operational solutions
|
|
4.2
|
Knowledge
transfer to business management
|
|
4.3
|
Knowledge
transfer to end users
|
|
4.4
|
Knowledge
transfer operations and support staff
|
|
AI5
|
Procure
IT resources
|
|
5.1
|
Procurement
control
|
|
5.2
|
Supplier
contract management
|
|
5.3
|
Supplier
selection
|
|
5.4
|
IT
resources acquisition
|
|
AI6
|
Manage
changes
|
|
6.1
|
Change
standard and procedures
|
|
6.2
|
Impact
assessment, prioritization and authorization
|
|
6.3
|
Emergency
changes
|
|
6.4
|
Change
status tracking and reporting
|
|
6.5
|
Change
closure and documentation
|
|
AI7
|
Install
and accredit solution and changes
|
|
7.1
|
Training
|
|
7.2
|
Test
plan
|
|
7.3
|
Implementation
plan
|
|
7.4
|
Test
environment
|
|
7.5
|
System
and data conversion
|



