ipl-logo

COBIT V4.1 Framework

993 Words4 Pages

Week 2: Aligning Risks, Threats, and Vulnerabilities to COBIT P09 Risk Management Controls
Lab #2 Lab Report File:
Risk Management – IS355
Sherry Best
Nicole Goodyear
January 23, 2018
Describe the primary goal of the COBIT v4.1 framework. Define COBIT.
The purpose of COBIT is to provide management and business process owners with an information technology (IT) governance model that helps in delivering value from IT with understanding and managing the risks associated with IT. COBIT also bridges the gaps between control requirements, business risk, and technical issues. It is a control model to meet the needs of IT governance and ensure the integrity of information and information systems by developing good practices for IT control for organization. …show more content…

Process Controls (PC) each COBIT process has genetic control requirements that are identified by PCn for process control number. They should be considered together with the process control objectives to have a complete view of control requirements.
6. Application Controls(AC) COBIT assumes the design and implementation of automated application controls to be responsibility of IT, which is covered in the Acquire and Implement domain based on business requirements defined using COBIT’s information criteria. The COBIT IT processes cover general IT controls, but only the development aspects of application controls.
View value and Risk Driver, describe what these objective covers.
The value and risk driver provide an informative basis for the achievement of control objectives and therefore for the realization and support of the risk management. Value drives can be interpreted as examples for upcoming business benefits through an adequate control coverage, where as the risk driver can be seen as examples for avoiding or handling risks.
In your Lab Report file, explain how you use the P09 Control Objectives to organize identified IT risks, threats, and vulnerabilities so you can then manage and remediate the risks, threats, and vulnerabilities in a typical infrastructure. …show more content…

For each of the threats and vulnerabilities from the Identifying Threats and Vulnerabilities in an IT Infrastructure lab in this lab manual (list at least three and no more than five) that you have remediated, what must you assess as part of your overall COBIT P09 risk management approach for your IT infrastructure?
Denial of service attack- close the ports and change the passwords.
Loss of Production Data- Backup the data and restore the data from the most recent known safe point.
Unauthorized access Workstation- Implement a policy where employees must adjust their passwords every sixty days and that they must set a screen lock out when they step away from their workstation
4. True or false: COBIT P09 risk management control objectives focus on assessment and management of IT risk.
True
5. What is the name of the organization that defined the COBIT P09 Risk Management Framework?
Information Systems Audit and Control Association (ISACA).
6. Describe three of the COBIT P09 control objectives.
• Plan and Organize is the domain that deals with the strategy and tactics and concerns the identification of the way information technology can best provide to the accomplishment of the business

Show More
Related

Nt1330 Unit 3 Application Programming Case Study

658 Words | 3 Pages

What is a process control block, and what is it used for? A process block control is a data structure containing information about an active process. PCB is used for storing the collected information about the processes and allows the OS to locate key information about a process such as the name, state of the process, resources that are allocated to the process, scheduling information, process ID, and input/output devices that are used by the process. 7.

Read More

Nt1310 Unit 3 Team Assignment

578 Words | 3 Pages

Executives should work towards minimizing those activities that inhibit alignment and maximize those activities that bolster it (Luftman & Brier, 1999) (as cited, Hsin Yien Laxamana, Discussion 1, 11:43 PM). Alignment is not a one-time event, it is a behavior that needs to be developed, cultivated, and sustained. My role as the CIO would be ensure the long-term development of alignment behavior, assessment of the company’s alignment maturity, and realign the IT department as necessary to maintain

Read More

The Dodd-Frank Act

2268 Words | 10 Pages

FISMA act gives a great importance to risk based rules that helps in defining cost-effective security solutions to the organization. FISMA standard should be executed with the help of senior security officials, chief information security officers and security director who can help to conduct different annual reviews of the organization`s information security program and produce the report in front of management about its findings. The management will use this data in order to identify different security loopholes and apply the proper security measures in order to make the organization security compliant. It`s

Read More

Baldridge Criteria For The Homeland Security Assessment Team

783 Words | 4 Pages

As a member of the Homeland Security Assessment Team for our organization, we will attempt to build a program that will allow us to meet the goals of our business plan as well as the needs of our Homeland Security Assessment that we will create from the results of our evaluation of our organization (Fisher, 2004). We will utilize the Baldridge Criteria to combine our two-goal seeking areas of our business plan as well as our Homeland Security Assessment goals that we are identified at the conclusion of our Homeland Security Assessment. When we do our Baldridge Criteria measurements of our organization we will be able to determine the areas of our organization that we are already protected from weaknesses and vulnerabilities; and will be able

Read More

Grainger Mission Statement Paper

1053 Words | 5 Pages

Empowerment and accountability are taking responsibility for your own actions and acting as an expert in the industry. The last value is agility, meaning to challenge each other and have an open mind. (Grainger, About Us, 2015) W. W. Grainger uses these values as a road map to

Read More

Cloud Computing Pros And Cons

1131 Words | 5 Pages

COBIT 5 focuses on the management of systems and procedures; it helps companies make a link between the needs of control, regulation, compliance and risk management and helps companies derive value from often heavily-invested-in Information Technology systems. What Resources can be Bought Relating to COBIT 5? Toolkits and books are on sale via our company (for example the well renowned IT Governance Control Framework Implementation

Read More

Benchmarking In Homeland Security Assessment

546 Words | 3 Pages

Based on benchmarking of the team, what are the key components to consider for your organization in a homeland security assessment? Why? I think before we go into this question that it is imperative that a definition of benchmark be given. A simple definition of benchmark is nothing more than this, to benchmark is to compare performance against a standard (Azevedo, Newman, & Pungiluppi, 2010).

Read More

Protiviti Case Study Examples

1164 Words | 5 Pages

1.2.3 Strategies • Review IT organizational structure • Review IT policies and

Read More

Personal Roles And Issues At Lawn And Order

1241 Words | 5 Pages

We have many comprise in our IT department that can comprise our company and our customer's records. These are the key weakness and inefficiency that need to be addressed by you Chris: separation of duties, mandatory vacations, job rotation policies, agreements with vendors, including password and other login information, and IT confidentiality agreements. To address this issue, this executive summary outlines a plan to improve the IT department. the plan will focus on improving the IT department’s processes and procedures. This includes streamlining existing processes, implementing new technologies, and training staff on the latest technologies and best

Read More

As8015-2005 Australia Standards Of It Governance

435 Words | 2 Pages

For instance, AS8015-2005, Australian Standard for IT Governance. It was adopted as ISO/IEC 38500 in May, years 2008. ISO/IEC 38500-2008, IT governance gives the framework for effective IT governance to assist the organization to fulfill and understand the organizations regulatory, legal, and ethical obligations from different sizes of organizations, inclusive of both public and private organizations, non-profit organizations, and government entities. It gives the principles to guide the organizations directors for efficient, effective, and acceptable use of IT in their organizations. Besides, Control Objectives for Information and related Technology, COBIT is the world leading IT governance and control framework.

Read More

Capability Maturity Model Integration Paper

1993 Words | 8 Pages

Combining ITIL, COBIT, and ISO/IEC 27002 in order to design a comprehensive IT framework in organizations. Second Asia International Conference on Modelling & Simulation, Malaysia, IEEE Computer

Read More

Enterprise Risk Management Case Study

1626 Words | 7 Pages

This workshop will only include those who will be most impacted by a specific risk. The goal of these workshops is to reduce the workload for the managers involved (Atkinson, 2003). Project teams are then created and an initial inventory of procedures already in place is conducted to address a specific risk. The team creates questions that will help them identify unnecessary activities that can be eliminated (Atkinson,2003). Once this step is completed, then an action plan is created.

Read More

Risk Assessment

766 Words | 4 Pages

The purpose of this publication is to provide guidance for conducting risk assessments of federal information systems and organizations. In addition to identifying the steps in the risk assessment process, it also provides guidance in identifying risk factors to watch and courses of action that should be taken. Risk assessments provide the senior leaders/executives with the information needed to determine appropriate courses of action in response to identified risks. The target audience includes individuals with oversight responsibilities for risk management, organizational missions/business functions, acquiring information technology products, services, or information systems, information system/security design, development, and implementation,

Read More

Examples Of IT Governance

887 Words | 4 Pages

Only when the IT governance is designed around the enterprise’s goals and performance objectives, will it then be active and performant because it is consistent and can be communicated in the enterprise-wide system. Fixing problems one after the other as they occur is a good defensive strategy but which has negative setbacks on the IT strategic performance by limiting its value creation opportunities. Most enterprises failed because they have designed an IT governance system whose mechanisms are uncoordinated and are not in congruence with the organization’s goals which can then leads to excessive IT expenditure or architectural

Read More

IT Infrastructure Audit Case Study

2512 Words | 11 Pages

The first step that the auditor should take is to gather as much information about any security procedures and policies that may have been in use following the information collected from the records available. Since each policy may have a different aspect that it works on, the findings from the audit may present evidence that may be vital in identifying the existing procedures or the absence of any policies or procedures. The existence of policies and procedures enables a company to reduce the occurrence or the impacts of a given risk. The lack of such policies may lead to reduced risk management

Read More

More about COBIT V4.1 Framework

Related Topics

Open Document