marcos cobi t -e-itil-v040811

Pink Elephant Inc. 2011. Los contenidos de este documento están protegidos por derechos de autor y de ninguna manera podrán ser reproducidos sin el consentimiento de Pink Elephant Inc. ITIL es una Marca Registrada de la Office of Government Commerce y está registrada ante la Oficina de Patentes y Marcas de los Estados Unidos de Norteamérica.

Knowledge translated into results

Control Objectives for Information Technology and It’s Relationship to the

Information Technology Infrastructure Library

Pink elephant Iberoamérica

CoBiT & ITIL



Quality Systems vs. Process Frameworks

Quality Control Systems

ISO 900x

COBIT

TQM

EFQM

Six Sigma

Malcolm Baldrige

Theory of Constraints

Statistical Process Control

Deming

Etc..

Process Frameworks

IT Infrastructure Library

Gartner CSD

IBM Processes

EDS Digital Workflow

Deloitte And Touche

Microsoft MOF

Telecom Ops Map

Etc..

• What is not defined cannot be controlled• What is not controlled cannot be measured• What is not measured cannot be improved

Define

Improve

Measure

Control AndStabilize

ITIL Best Practices



CoBiT Mission

• To research, develop, publicize and promote an authoritative, up-to-date, international set of generally accepted information technology control objectives for day to day use by business managers and auditors.



CoBiT• CoBIT is an open standard control framework for IT Governance

with a focus on IT Standards and Audit• Based on over 40 International standards and is supported by a

network of 150 IT Governance Chapters operating in over 100 countries

• CoBiT describes standards, controls, and maturity guidelines for four domains, and 34 control objectives.

• For Each Control Objective CoBiT details the enablers, Key Peformance Indicators (KPI’s) Key Goal Indicators (KGI’s), Critical Success Factors (CSF’s) and Maturity Indicators



Key Definitions

• IT Governance: A structure of relations and processes to direct and control the enterprise in order to achieve the enterprise’s goals by adding value while balancing risk versus return over IT and its processes.

• Control Objective: A statement of desired result or purpose to be achieved by implementing best practices and control procedures in a particular IT activity or process.

• Control: The process, policies, procedures, practices and organizational structures are designed and in place to provide reasonable assurance that business objectives will be achieved and that undesired events will be prevented or detected and corrected.



CoBiT Governance Scope

• Domains

• Control Objectives• Processes

• Activities • Activities • Activities

Reliability

Compliance

Integrity Availability

Confidentially

Efficiency

Effectiveness

Information

Processes

Application Systems

Data Facilities

Technology

People

IT Resources



CoBiT Documents



CoBiT Model



CoBiT Model and ITIL Overlap

Planning & Organization

Monitoring

Delivery & Support

Acquisition &Implementation

PO1 Define a strategic IT Plan BEF

PO2 define the information architecture ICT

PO3 Determine the technological direction BEF

PO4 define the IT organization / relationships BEF

PO5 Mange the IT investment BEF

PO6 Comm. management aims / direction BEF

PO7 Manage human resources BEF

PO8 Ensure compliance with external requirements

PO9 Assess Risks SD & Risk Mgt.

PO10 Manage Projects Prince 2

PO11 Manage Quality SD

AI1 Identify automated solutions ITC

AI2 Acquire and maintain application software AM

AI3 Acquire and maintain technology infrastructure ICT

AI4 Develop and maintain procedures BEF

AI5 Install and accredit systems SS

AI6 Manages Changes SS

DS 1 Define and Manage service levels SD

DS 2 Manage third party services SD

DS3 Manage performance capacity SD

DS4 Ensure continuous service SD

DS5 Ensure systems security Security

DS6 Identify and allocate costs SD

DS7 Educate and train users = BEF

DS8 Assist and advise customers SS

DS9 Manage the configuration SS

DS10 Manage problems and incidents SS

DS11 Manage data ITC

DS12 Manage facilities ITC

DS 13 Manage operations ITC

M1 Monitor the processes SD

M2 Asses internal control adequacy

M3 Obtain independent assurances

M4 provide for independent audit

ITIL Service Support = SS

ITIL Service Delivery = SD

ITIL ICT Infrastructure Mgmt = ICT

Business Excellence Framework = BEF



ITIL Management Model



IT Business Excellence Framework™



CoBiT and ITIL• CoBiT provides the controls and

audit requirements• ITIL provides the detail for process

steps and relationships



CoBiT Model and ITIL ImplementationCoBiT Governance

Four Domains

34 Control Objectives

• Critical Success Factors

• Key Performance Indicators

• Detail Control Objectives/Deliverables

• Maturity Guidelines

ITIL Integrated Processes

• Defined Activities / Relationships / Policies

• Defined Roles & Responsibilities

• Education / Certification

Pink Value Add• Depth of Experience

• Process Flows

• Formal Implementation process

• Defined process roles and responsibilities

• Templates

• Project Plans / Resources

• Detailed Maturity Guidelines

Detailed ProcessesDetail



Pink Elephant - Expertos en Gestión de Servicios de TI

[email protected]

mailto:[email protected]

http://www.pinkelephant.com/

marcos cobi t -e-itil-v040811

Business

quality systems

cobit itilcontrol objectives