IT审计与控制模型COBIT(同济大学 刘仲英教授).ppt

Advanced Information Technology and Management Management guidelines Maturity models Critical success factors Key goal indicators Key performance indicators IT domains Planning Organization Acquisition Implementation Delivery Support Monitoring COBIT IT Processes Defined Within the Four Domains COBIT Business Objectives Information IT Resources Planning Organization Acquisition Implementation Delivery Support Monitoring IT Resources IT Resources Application Systems Data Application Systems Technology Facilities People Domains Processes Processes Activities/ Tasks Information Criteria Quality Fiduciary Security Quality Cost Delivery Effectiveness Efficiency Reliability Compliance Confidentiality Integrity Availability 4.Control Objectives High--Level Control Objectives 34 (Control Over the IT Process) Control Objectives 318 (Control Over the Activities/Tasks) Planning Organization PO1 define a strategic IT plan PO2 define the information architecture PO3 determine the technological direction PO4 define the IT organization and relationships PO5 manage the IT investment PO6 communicate management aims and direction PO7 manage human resources PO8 ensure compliance with external requirements PO9 assess risks PO10 manage projects PO11 manage quality Acquisition Implementation AI1 identify solutions AI2 acquire and maintain application software AI3 acquire and maintain technology architecture AI4 develop and maintain IT procedures AI5 install and accredit systems AI6 manage changes Delivery Support DS1 define service levels DS2 manage third-party services DS3 manage performance and capacity DS4 ensure continuous service DS5 ensure systems security DS6 identify and attribute costs DS7 educate and train users DS8 assist and advise IT customers DS9 manage the configuration DS10 manage problems and incidents DS11 manage data DS12 manage facilities DS13 manage operations Monitoring M1 monitor