Have you ever desired to apply, but felt confused?
Don’t worry! I will make it easy to understand.
I am a strong advocate for frameworks as they offer a systematic approach to Cyber security implementation and governance. While frameworks are invaluable tools, I’ve always tailored and customized them to align with the regulatory, operational, and strategic requirements of the organizations where I worked or provided consultation. I’m excited about the recent developments in frameworks, particularly their ability to address emerging technological fronts and cyber threats. I’ll soon be blogging about COBIT 2019.
The COBIT 2019 Framework indeed presents a multifaceted landscape, intricately woven into the fabric of organizational governance. Its tendrils reach across processes, controls, and information systems, seeking to harmonize the symphony of business objectives and risk management.
COBIT, an acronym that resonates with auditors, CIOs, and IT practitioners alike, stands for Control Objectives for Information and Related Technologies. It is not merely a set of guidelines; it is a compass, guiding organizations through the turbulent seas of digital transformation.
Let us dissect this intricate tapestry:
- Complexity Unveiled:
- The COBIT 2019 Framework sprawls across five domains: Evaluate, Direct and Monitor (EDM), Align, Plan and Organize (APO), Build, Acquire and Implement (BAI), Design, Deliver and Support (DSS), and Monitor, Evaluate and Assess (MEA). Each domain, a constellation of processes, orbits around the nucleus of governance.
- Within these domains, 40 Processes beckon, each with its own set of control objectives. These objectives, like sentinels, guard against the tempests of risk and inefficiency.
- From the 40 processes, 229 Practices are defined and illustrated
- Then the Practices dive into 1016 Activities
- All these are then mapped to 13 Enterprise Goals and 13 Alignment Goals.
- COBIT 2019, do provide example Metrics for both the Enterprise and Alignment Goals.
- Executive Sponsorship:
- Ah, the C-suite, where decisions echo through boardrooms and reverberate across balance sheets. For COBIT to flourish, it craves the embrace of executive sponsorship—a nod from the titans who steer the ship.
- The CEO, the CFO, the CIO—their signatures etch the charter of COBIT’s voyage. Their vision, the North Star guiding implementation.
- Continuous Support:
- Like a sapling yearning for sunlight, COBIT thrives on nurturing. It demands more than a ceremonial launch—it craves sustenance.
- Training, awareness programs, and ongoing education—these are the lifeblood of COBIT. The organization must breathe life into its control objectives, infusing them into the very marrow of its processes.
- Simplification for Beginners:
- And here we tread upon fertile ground—the realm of simplicity. For the uninitiated, COBIT can be a labyrinth of acronyms and jargon.
- My blog posts shall be the Rosetta Stone, translating COBIT 2019’s cryptic runes into plain language. We shall demystify the esoteric, unravel the enigma, and lead beginners toward enlightenment.
- Industry Standards:
- COBIT does not dwell in isolation. It dances with ISO 27001, flirts with ITIL, and nods to NIST SP 800-53, CSF 2.0 etc.,. Together, they form a celestial alignment—an industry standard constellation.
- As beginners gaze upon this cosmic dance, they shall gain appreciation for the harmonious interplay of frameworks, each note contributing to the symphony of secure and efficient operations.
So, my fellow voyagers, let us embark on this journey. The compass is set, the stars aligned. Through the tempests of complexity, we shall navigate, simplifying the arcane for the curious and the eager.
Sign up to receive notifications!
Subscribe for more posts like this
Leave a Reply