Sarbanes-Oxley IT Compliance Using Open Source Tools, Second Edition

Appendix A: COBIT Control Objectives

PLANNING & ORGANIZATION

  1. Define a Strategic IT Plan

    1.1

    IT as Part of the Organization's Long-and Short-Range Plan

    1.2

    IT Long-Range Plan

    1.3

    IT Long-Range Planning Approach and Structure

    1.4

    IT Long-Range Plan Changes

    1.5

    Short-Range Planning for the IT Function

    1.6

    Communication of IT Plans

    1.7

    Monitoring and Evaluating of IT Plans

    1.8

    Assessment of Existing Systems

  2. Define the Information Architecture

    2.1

    Information Architecture Model

    2.2

    Corporate Data Dictionary and Data Syntax Rules

    2.3

    Data Classification Scheme

    2.4

    Security Levels

  3. Determine Technological Direction

    3.1

    Technological Infrastructure Planning

    3.2

    Monitor Future Trends and Regulations

    3.3

    Technological Infrastructure Contingency

    3.4

    Hardware and Software Acquisition Plans

    3.5

    Technology Standards

  4. Define the IT Organization and Relationships

    4.1

    IT Planning or Steering Committee

    4.2

    Organizational Placement of the IT Function

    4.3

    Review of Organizational Achievements

    4.4

    Roles and Responsibilities

    4.5

    Responsibility for Quality Assurance

    4.6

    Responsibility for Logical and Physical Security

    4.7

    Ownership and Custodianship

    4.8

    Data and System Ownership

    4.9

    Supervision

    4.10

    Segregation of Duties

    4.11

    IT Staffing

    4.12

    Job or Position Descriptions for IT Staff

    4.13

    Key IT Personnel

    4.14

    Contracted Staff Policies and Procedures

    4.15

    Relationships

  5. Manage the IT Investment

    5.1

    Annual IT Operating Budget

    5.2

    Cost and Benefit Monitoring

    5.3

    Cost and Benefit Justification

  6. Communicate Management Aims and Direction

    6.1

    Positive Information Control Environment

    6.2

    Management's Responsibility for Policies

UNLIMITED FREE
ACCESS
TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Category: Engineering Consulting Services
Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.