Risk Assessment and Control Verification - Governance, Risk, and Compliance Topic for Oracle Applications - page 133

The COBIT framework
COBIT 4.1 has 34 high-level processes that cover 210 control objectives categorized
in four domains: Planning and Organization, Acquisition and Implementation,
Delivery and Support, and Monitoring and Evaluation. COBIT provides benefits to
managers, IT users, and auditors. Managers benefit from COBIT as it provides them
with a foundation upon which IT-related decisions and investments can be based.
Decision making is more effective because COBIT aids management in defining a
strategic IT plan, defining the information architecture, acquiring the necessary IT
hardware and software to execute an IT strategy, ensuring continuous service, and
monitoring the performance of the IT system. IT users benefit from COBIT because
of the assurance provided to them by COBIT's defined controls, security, and process
governance. COBIT benefits auditors because it helps them identify IT control issues
within a company's IT infrastructure. It also helps them corroborate their audit
findings. In Chapter 10 , Cross Industry Cross Compliance , we will go into more details
regarding this framework.

ov e

e rn

ati

IT

Plan and
Organise

Acquire and
Implement

Monitor and
Evaluate

Goals Metrics

Deliver and
Support

n

r

d A

t, R