Framework COBIT

Pertemuan Minggu ke -6 Framework COBITAgenda2Cobit Context Cobit Principle Bussiness Focused Process Control Oriented IT Resources Performance Measurement Overall Cobit Interrelationship

Cobit Context Dasar-Dasar Audit SIIT is an important factor in achieving success in the information economy and central to an entitys operational and financial management. enterprise governance and IT governance can no longer be considered separate and distinct disciplinesIT governance : the structure that links IT processes, IT resources and information to enterprise strategies and objectives. integrates and institutionalises optimal ways of planning and organising, acquiring and implementing, delivering and supporting, and monitoring and evaluating IT performance. assuring efficient and effective measurable improvements in related enterprise processes. enables the enterprise to take full advantage of its information, thereby maximising benefits, capitalising on opportunities and gaining competitive advantage.Cobit Context Dasar-Dasar Audit SI

IT Governance Lifecycle Dasar-Dasar Audit SI

Cobit Audience Dasar-Dasar Audit SICOBIT is designed to be used by three distinct audiences:ManagementTo help them balance risk and control investment in an often unpredictable IT environmentUsersTo obtain assurance on the security and controls of IT services provided by internal or third partiesAuditorsTo provide a framework to assist them to come to an opinion on the level of assurance on the particular subject matter being audited and/or provide advice to management on internal controlsPrinciple Dasar-Dasar Audit SICobit Framework Principle:Bussiness Focussed Process Control Oriented IT resources Measurement-drivenTo provide the information that the enterprise requires to achieve its objectives, the enterprise needs to invest in and manage and control IT resources using a structured set of processes to provide the services that deliver the required Cobit

Principle Dasar-Dasar Audit SI

Basic Cobit Principles Cobit Principle- Bussiness Focus: Dasar-Dasar Audit SIInformation Criteria To satisfy business objectives, information needs to conform to certain control criteria : Quality, Fiduciary, Security Bussiness Goal & IT GoalBasis for establishing business requirements and developing the metrics that allow measurement against these goals.A clear ownership and direction of the requirements by the business (the customer) and a clear understanding of what needs to be delivered, and how, by IT (the provider).Principle- Bussiness Focus: Dasar-Dasar Audit SIInformation Criteria :Quality :Effectiveness.EfficiencySecurity ConfidentialityIntegrity.Availability Fiduciary Compliance Reliable Control measures over the IT processes will not necessarily satisfy all the different business requirements indicated using primary (P), secondary (S) or blank indicators:Principle- Bussiness Focus: Dasar-Dasar Audit SI

Principle Process Control Oriented Dasar-Dasar Audit SI Process Oriented :COBIT defines IT activities in a generic process model within four domains: Plan and Organise (PO) - Provides direction to solution delivery (AI) and service delivery (DS)Acquire and Implement (AI) - Provides the solutions and passes them to be turned into servicesDeliver and Support (DS)Receives the solutions and makes them usable for end usersMonitor and Evaluate (ME)Monitors all processes to ensure that the direction provided is followedPrinciple Process Control Oriented Dasar-Dasar Audit SI

Principle Process Control Oriented Dasar-Dasar Audit SIRaci Chart :ResponsibleThose who do the work to achieve the task.AccountableThose who are ultimately accountable for the correct and thorough completion of the deliverable or task.ConsultedThose whose opinions are sought; and with whom there is two-way communication.InformedThose who are kept up-to-date on progress, often only on completion of the task or deliverable and with whom there is just one-way communication. Principle Process Control Oriented Dasar-Dasar Audit SI

Principle IT Resources Dasar-Dasar Audit SIIT Resources :To respond to the business requirements for IT, the enterprise needs to invest in the resources required : Applications InformationInfrastructurePeople

Principle IT ResourcesDasar-Dasar Audit SI

Defining IT Goals and Enterprise Architecture For IT Cobit Navigation Dasar-Dasar Audit SI

High Level Control Objective Domain process Information CriteriaIT Governance ComponentIT Resources Principle Measurement DrivenDasar-Dasar Audit SIMaturity Model :Using the maturity models developed for each of Cobit 34 IT processes, management can identify:The actual performance of the enterpriseWhere the enterprise is todayThe current status of the industryThe comparisonThe enterprises target for improvementWhere the enterprise wants to beThe required growth path between as-is and to-bePrinciple Measurement DrivenDasar-Dasar Audit SI

Principle Measurement DrivenDasar-Dasar Audit SIMaturity Model :are built up starting from the generic qualitative model to which principles from the following attributes :Awareness and communicationPolicies, plans and proceduresTools and automationSkills and expertiseResponsibility and accountabilityGoal setting and measurementPrinciple Measurement DrivenDasar-Dasar Audit SI

Principle Measurement DrivenDasar-Dasar Audit SIGoals and metrics are defined in COBIT at three levels:IT goals and metrics : what the business expects from IT and how to measure itProcess goals and metrics : what the IT process must deliver to support ITs objectives and how to measure itActivity goals and metrics : what needs to happen inside the process to achieve the required performance and how to measure itPrinciple Measurement DrivenDasar-Dasar Audit SI

Principle Measurement DrivenDasar-Dasar Audit SITwo kind of metric : Outcome measure, previously key goal indicators (KGIs)indicate whether the goals have been met. These can be measured only after the fact - lag indicatorsPerformance indicatorspreviously key performance indicators (KPIs), indicate whether goals are likely to be met. They can be measured before the outcome is clear - lead indicators.Principle Measurement DrivenDasar-Dasar Audit SI

Outcome Measurement - Lag Indicator

Performance Metric - Lead Indicator Overall Cobit Principle Dasar-Dasar Audit SI

Cobit Cube Overall Cobit Framework Dasar-Dasar Audit SI

Interrelationship Between Cobit ComponentDasar-Dasar Audit SI