Cópia de 12.COBIT5 Governance and Management Practices Activities_April2014

8/12/2019 Cpia de 12.COBIT5 Governance and Management Practices Activities_April2014

1/301

2012 ISACA. All rights reserved. No part of this publication may b

stored in a retrieval system or transmitted in any form by any mean#ithout the prior #ritten authorisation of ISACA. %se of this publicatattribution of the material&s source. No other right or permission is


2/301

used copied reproduced modi!ed distributed displayed

s "electronic mechanical photocopying recording or other#ise$ion is permitted solely for personal use and must include fullranted #ith respect to this #or'.


3/301

Listed below are the practices associated with each of the governance and management processes in COBIT

)rocesses* (+

Area Domain Process Process Description Process Prpose !tatement "ew In

,overnance -/01

,overnance -/02

,overnance -/0(

,overnance -/0

,overnance -/0

The practices are sorted in the order in which the% appear in COBIT 5: Enabling Processes.

ProcessID

-valuateirect and/onitor

-nsure,overnance3rame#or'Setting and/aintenance

Analyse and articulate there4uirements for the governance ofenterprise I5 and put in place andmaintain e6ective enabling structuresprinciples processes and practices

#ith clarity of responsibilities andauthority to achieve the enterprise&smission goals and ob7ectives.

)rovide a consistent approach integratedand aligned #ith the enterprise governanceapproach. 5o ensure that I58related decisionsare made in line #ith the enterprise&sstrategies and ob7ectives ensure that I58

related processes are overseen e6ectivelyand transparently compliance #ith legaland regulatory re4uirements is con!rmedand the governance re4uirements for boardmembers are met.

-valuateirect and

/onitor

-nsure 9ene!tselivery

ptimise the value contribution to thebusiness from the business processes

I5 services and I5 assets resulting frominvestments made by I5 at acceptablecosts.

Secure optimal value from I58enabledinitiatives services and assets: cost8e;cient

delivery of solutions and services: and areliable and accurate picture of costs andli'ely bene!ts so that business needs aresupported e6ectively and e;ciently.

-valuateirect and/onitor

-nsure


4/301

Area Domain Process Process Description Process Prpose !tatement "ewProcess

ID

/anagement A)02 /anage Strategy

/anagement A)0( >es

/anagement A)0 >es

/anagement A)0 /anage )ortfolio >es

/anagement A)0? >es

Align )lan

and rganise

)rovide a holistic vie# of the current

business and I5 environment thefuture direction and the initiativesre4uired to migrate to the desiredfuture environment. @everageenterprise architecture building bloc'sand components including e=ternallyprovided services and related

Align strategic I5 plans #ith business

ob7ectives. Clearly communicate theob7ectives and associated accountabilitiesso they are understood by all #ith the I5strategic options identi!ed structured andintegrated #ith the business plans.

Align )lanand rganise

/anage-nterpriseArchitecture

-stablish a common architectureconsisting of business processinformation data application andtechnology architecture layers for

e6ectively and e;ciently realisingenterprise and I5 strategies by


5/301

Area Domain Process Process Description Process Prpose !tatement "ew IProcess

ID

/anagement A)0+

/anagement A)0B >es

/anagement A)0

/anagement A)10

/anagement A)11 /anage Duality

/anagement A)12 /anage


6/301


ID

/anagement A)1( /anage Security >es

/anagement 9AI01

/anagement 9AI02

/anagement 9AI0(

/anagement 9AI0

Align )lan

and rganise

e!ne operate and monitor a system

for information security management.

Feep the impact and occurrence of

information security incidents #ithin theenterprise&s ris' appetite levels.

9uildAc4uire andImplement

/anage)rogrammes and)ro7ects

/anage all programmes and pro7ectsfrom the investment portfolio inalignment #ith enterprise strategy andin a co8ordinated #ay. Initiate plancontrol and e=ecute programmes andpro7ects and close #ith a post8implementation revie#.


7/301


ID

/anagement 9AI0? /anage Changes

/anagement 9AI0+

/anagement 9AI0B >es

/anagement 9AI0 /anage Assets >es

/anagement 9AI10

9uild

Ac4uire andImplement

/anage all changes in a controlled

manner including standard changesand emergency maintenance relatingto business processes applicationsand infrastructure. 5his includeschange standards and proceduresimpact assessment prioritisation andauthorisation emergency changestrac'ing reporting closure anddocumentation.

-nable fast and reliable delivery of change

to the business and mitigation of the ris' ofnegatively impacting the stability orintegrity of the changed environment.


/anage ChangeAcceptance and5ransitioning

3ormally accept and ma'e operationalne# solutions includingimplementation planning system anddata conversion acceptance testingcommunication release preparationpromotion to production of ne# orchanged business processes and I5services early production support anda post8implementation revie#.

Implement solutions safely and in line #iththe agreed8on e=pectations and outcomes.


/anageFno#ledge

/aintain the availability of relevantcurrent validated and reliable'no#ledge to support all processactivities and to facilitate decisionma'ing. )lan for the identi!cationgathering organising maintaining useand retirement of 'no#ledge.

)rovide the 'no#ledge re4uired to supportall sta6 in their #or' activities and forinformed decision ma'ing and enhancedproductivity.


/anage I5 assets through their lifecycle to ma'e sure that their usedelivers value at optimal cost theyremain operational "!t for purpose$they are accounted for and physicallyprotected and those assets that arecritical to support service capabilityare reliable and available. /anage

Account for all I5 assets and optimise thevalue provided by these assets.

9uildAc4uire and

Implement

/anageCon!guration

e!ne and maintain descriptions andrelationships bet#een 'ey resources

and capabilities re4uired to deliver I58enabled services including collectingcon!guration information establishingbaselines verifying and auditing

)rovide su;cient information about serviceassets to enable the service to be e6ectively

managed assess the impact of changes anddeal #ith service incidents.


8/301


ID

/anagement SS02

/anagement SS0( /anage )roblems

/anagement SS0

/anagement SS0 >es

/ t SS0? >

eliver

Service andSupport

/anage Service


9/301


ID

/anagement /-A01

/anagement /-A02

/anagement /-A0(

/onitor

-valuate andAssess

/onitor -valuate

and Assess)erformance andConformance

Collect validate and evaluate

business I5 and process goals andmetrics. /onitor that processes areperforming against agreed8onperformance and conformance goalsand metrics and provide reporting thatis systematic and timely.

)rovide transparency of performance and

conformance and drive achievement ofgoals.

/onitor-valuate andAssess

/onitor -valuateand Assess theSystem ofInternal Control

Continuously monitor and evaluate thecontrol environment including self8assessments and independentassurance revie#s. -nable

management to identify controlde!ciencies and ine;ciencies and toinitiate improvement actions. )lan

btain transparency for 'ey sta'eholders onthe ade4uacy of the system of internalcontrols and thus provide trust inoperations con!dence in the achievement

of enterprise ob7ectives and an ade4uateunderstanding of residual ris'.

/onitor-valuate andAssess

/onitor -valuateand AssessCompliance #ith-=ternal


10/301

Listed below are the practices associated with each of the governance and management processes in COBIT 5.

)rocesses* (+

)ractices* -rr*02

Area Domain Process Process Description Process Prpose !tatement Practice

/anagement 9AI01 9AI01.01


/anagement 9AI01 9AI01.0(



The practices are sorted in the order in which the% appear in COBIT 5: Enabling Processes.

ProcessID

PracticeID



/anage all programmes and pro7ectsfrom the investment portfolio inalignment #ith enterprise strategy andin a co8ordinated #ay. Initiate plan

control and e=ecute programmes andpro7ects and close #ith a post8implementation revie#.


11/301

Area Domain Process Process Description Process Prpose !tatement PrProcess

IDPractice

ID

/anagement 9AI01 9AI01.0?

/anagement 9AI01 9AI01.0+

/anagement 9AI01 9AI01.0B )la







/oandproout



Stainit#itpro



9uildAc4uire and

Implement

/anage)rogrammes and

)ro7ects

/apro

pro



/apropro



/ocon



/ares#or


12/301

Area Domain Process Process Description Process Prpose !tatement PProcess

IDPractice

ID






/anagement 9AI0( 9AI0(.01



Clopro


/anage


13/301


IDPractice

ID


/anagement 9AI0( 9AI0(.0(


/anagement 9AI0( 9AI0(.0 9ui

/anagement 9AI0( 9AI0(.0?

/anagement 9AI0( 9AI0(.0+


/anage SolutionsIdenti!cation and9uild

essolucom

9uild


/anage Solutions

Identi!cation and9uild

ev

com

9uildAc4uire and

Implement

/anage SolutionsIdenti!cation and

9uild

)rocom





)erass



)resolu


14/301


IDPractice

ID

/anagement 9AI0( 9AI0(.10 /a











eanse

9uildAc4uire and

Implement

/anageAvailability and

Capacity

9alance current and future needs foravailability performance and capacity

#ith cost8e6ective service provision.Include assessment of currentcapabilities forecasting of futureneeds based on businessre4uirements analysis of businessimpacts and assessment of ris' toplan and implement actions to meetthe identi!ed re4uirements.

/aintain service availability e;cientmanagement of resources and optimisation

of system performance through prediction offuture performance and capacityre4uirements.

Asav

pecacre


/anageAvailability andCapacity

Asim



)lachre4



/oavca

9uild


/anage

Availability andCapacity

Inv

adavpeca


15/301


IDPractice

ID





/anagement 9AI0 9AI0.0?

/anagement 9AI0 9AI0.0+ Su

/anagement 9AI0? /anage Changes 9AI0?.01


/anagerganisationalChange-nablement

3oimtea



Code



-mplaide#in

9uildAc4uire and

Implement

/anagerganisational

Change-nablement

-nan



-map

9uild


/anage

rganisationalChange-nablement


/anage all changes in a controlledmanner including standard changesand emergency maintenance relatingto business processes applicationsand infrastructure. 5his includeschange standards and procedures

impact assessment prioritisation andauthorisation emergency changestrac'ing reporting closure anddocumentation

-nable fast and reliable delivery of changeto the business and mitigation of the ris' ofnegatively impacting the stability orintegrity of the changed environment.

-vancha


16/301


IDPractice

ID

/anagement 9AI0? /anage Changes 9AI0?.0(

/anagement 9AI0? /anage Changes 9AI0?.0

/anagement 9AI0+ 9AI0+.01


/anagement 9AI0+ 9AI0+.0(



/anagement 9AI0+ 9AI0+.0?


5racha


Clodocha



3ormally accept and ma'e operationalne# solutions includingimplementation planning system anddata conversion acceptance testingcommunication release preparationpromotion to production of ne# orchanged business processes and I5services early production support anda post8implementation revie#.

Implement solutions safely and in line #iththe agreed8on e=pectations and outcomes.

-stimpla



)laproanco



)lates

9uild


/anage Change

Acceptance and5ransitioning

-st

en



)eacc

9uild


/anage Change

Acceptance and5ransitioning

)ro

proma


17/301


IDPractice

ID

/anagement 9AI0+ 9AI0+.0B

/anagement 9AI0B 9AI0B.01


/anagement 9AI0B 9AI0B.0(



/anagement 9AI0 /anage Assets 9AI0.01



)eimrev


/anageFno#ledge

/aintain the availability of relevantcurrent validated and reliable'no#ledge to support all processactivities and to facilitate decisionma'ing. )lan for the identi!cation

gathering organising maintaining useand retirement of 'no#ledge.

)rovide the 'no#ledge re4uired to supportall sta6 in their #or' activities and forinformed decision ma'ing and enhancedproductivity.

Nufac'ncu


/anageFno#ledge

Ideclainf

9uildAc4uire and

Implement

/anageFno#ledge

rco

inf'n


/anageFno#ledge

%s'n

9uild


/anage

Fno#ledge

-v

inf


/anage I5 assets through their lifecycle to ma'e sure that their usedelivers value at optimal cost theyremain operational "!t for purpose$they are accounted for and physicallyprotected and those assets that arecritical to support service capabilityare reliable and available. /anage

soft#are licences to ensure that theoptimal number are ac4uired retainedand deployed in relation to re4uiredb i d h f

Account for all I5 assets and optimise thevalue provided by these assets.

Idecu


18/301


IDPractice

ID

/anagement 9AI0 /anage Assets 9AI0.0(

/anagement 9AI0 /anage Assets 9AI0.0

/anagement 9AI0 /anage Assets 9AI0.0 /a






9uildAc4uire and

Implement

/alife


pcos



/anageCon!guration

e!ne and maintain descriptions andrelationships bet#een 'ey resourcesand capabilities re4uired to deliver I58enabled services including collectingcon!guration information establishingbaselines verifying and auditingcon!guration information andupdating the con!guration repository.

)rovide su;cient information about serviceassets to enable the service to be e6ectivelymanaged assess the impact of changes anddeal #ith service incidents.

-stmaconmo


/anageCon!guration

-stmaconrepbas


/anageCon!guration

/aconconite


/anageCon!guration

)roconrep


/anageCon!guration

Heintconrep


19/301

&overnance Practice

/aintain a standard approach for programme and pro7ectmanagement that enables governance and managementrevie# and decision ma'ing and delivery managementactivities focussed on achieving value and goals"re4uirements ris' costs schedule 4uality$ for thebusiness in a consistent manner.

Initiate a programme to con!rm the e=pected bene!tsand obtain authorisation to proceed. 5his includesagreeing on programme sponsorship con!rming theprogramme mandate through approval of the conceptual

business case appointing programme board orcommittee members producing the programme briefrevie#ing and updating the business case developing abene!ts realisation plan and obtaining approval fromsponsors to proceed.

/anage sta'eholder engagement to ensure an activee=change of accurate consistent and timely informationthat reaches all relevant sta'eholders. 5his includes

planning identifying and engaging sta'eholders andmanaging their e=pectations.

3ormulate a programme to lay the initial ground#or' andto position it for successful e=ecution by formalising thescope of the #or' to be accomplished and identifying thedeliverables that #ill satisfy its goals and deliver value./aintain and update the programme plan and businesscase throughout the full economic life cycle of theprogramme ensuring alignment #ith strategic ob7ectives

and reecting the current status and updated insightsgained to date.


20/301

&overnance Practice

/onitor and control programme "solution delivery$ andenterprise "valueGoutcome$ performance against plan

throughout the full economic life cycle of the investment.


21/301

&overnance Practice


22/301

&overnance Practice

evelop document and elaborate detailed designsprogressively using agreed8on and appropriate phased or

rapid agile development techni4ues addressing allcomponents "business processes and related automatedand manual controls supporting I5 applicationsinfrastructure services and technology products andpartnersGsuppliers$. -nsure that the detailed designincludes internal and e=ternal S@As and @As.

evelop solution components progressively in

accordance #ith detailed designs follo#ing developmentmethods and documentation standards 4ualityassurance "DA$ re4uirements and approval standards.-nsure that all control re4uirements in the businessprocesses supporting I5 applications and infrastructureservices services and technology products andpartnersGsuppliers are addressed.

)rocure solution components based on the ac4uisitionplan in accordance #ith re4uirements and detailed

designs architecture principles and standards and theenterprise&s overall procurement and contractprocedures DA re4uirements and approval standards.-nsure that all legal and contractual re4uirements areidenti!ed and addressed by the supplier.

Install and con!gure solutions and integrate #ithbusiness process activities. Implement control securityand auditability measures during con!guration andduring integration of hard#are and infrastructural

soft#are to protect resources and ensure availability anddata integrity. %pdate the services catalogue to reectthe ne# solutions.

evelop resource and e=ecute a DA plan aligned #iththe D/S to obtain the 4uality speci!ed in there4uirements de!nition and the enterprise&s 4ualitypolicies and procedures.

-stablish a test plan and re4uired environments to test

the individual and integrated solution componentsincluding the business processes and supporting servicesapplications and infrastructure.


23/301

&overnance Practice

evelop and e=ecute a plan for the maintenance ofsolution and infrastructure components. Include periodic

revie#s against business needs and operationalre4uirements.

e!ne and agree on ne# or changed I5 services andservice level options. ocument ne# or changed servicede!nitions and service level options to be updated in theservices portfolio.

Assess availability performance and capacity of servicesand resources to ensure that cost87usti!able capacity andperformance are available to support business needs anddeliver against S@As. Create availability performance andcapacity baselines for future comparison.

Identify important services to the enterprise mapservices and resources to business processes andidentify business dependencies. -nsure that the impactof unavailable resources is fully agreed on and acceptedby the customer. -nsure that for vital business functionsthe S@A availability re4uirements can be satis!ed.

)lan and prioritise availability performance and capacityimplications of changing business needs and servicere4uirements.

/onitor measure analyse report and revie# availabilityperformance and capacity. Identify deviations fromestablished baselines.


24/301

&overnance Practice

-stablish an e6ective implementation team byassembling appropriate members creating trust and

establishing common goals and e6ectiveness measures.

Communicate the desired vision for the change in thelanguage of those a6ected by it. 5he communicationshould be made by senior management and include therationale for and bene!ts of the change the impacts ofnot ma'ing the change: and the vision the road map andthe involvement re4uired of the various sta'eholders.

-mpo#er those #ith implementation roles by ensuringthat accountabilities are assigned providing training andaligning organisational structures and E< processes.Identify and communicate short8term #ins that can berealised and are important from a change enablementperspective.

)lan and implement all technical operational and usageaspects such that all those #ho are involved in the future

state environment can e=ercise their responsibility.

-mbed the ne# approaches by trac'ing implementedchanges assessing the e6ectiveness of the operationand use plan and sustaining ongoing a#areness throughregular communication. 5a'e corrective measures asappropriate #hich may include enforcing compliance.

Sustain changes through e6ective training of ne# sta6

ongoing communication campaigns continued topmanagement commitment adoption monitoring andsharing of lessons learned across the enterprise.

-valuate all re4uests for change to determine the impacton business processes and I5 services and to assess#hether change #ill adversely a6ect the operationalenvironment and introduce unacceptable ris'. -nsurethat changes are logged prioritised categorisedassessed authorised planned and scheduled.


25/301

&overnance Practice

/aintain a trac'ing and reporting system to documentre7ected changes communicate the status of approved

and in8process changes and complete changes. /a'ecertain that approved changes are implemented asplanned.

henever changes are implemented update accordinglythe solution and user documentation and the proceduresa6ected by the change.

-stablish an implementation plan that covers system anddata conversion acceptance testing criteriacommunication training release preparation promotionto production early production support afallbac'Gbac'out plan and a post8implementation revie#.btain approval from relevant parties.

)repare for business process I5 service data andinfrastructure migration as part of the enterprise&sdevelopment methods including audit trails and arecovery plan should the migration fail.

-stablish a test plan based on enterprise#ide standardsthat de!ne roles responsibilities and entry and e=itcriteria. -nsure that the plan is approved by relevantparties.

e!ne and establish a secure test environment

representative of the planned business process and I5operations environment performance and capacitysecurity internal controls operational practices data4uality and privacy re4uirements and #or'loads.

5est changes independently in accordance #ith thede!ned test plan prior to migration to the live operationalenvironment.

)romote the accepted solution to the business and

operations. here appropriate run the solution as a pilotimplementation or in parallel #ith the old solution for ade!ned period and compare behaviour and results. If


26/301

&overnance Practice

Conduct a post8implementation revie# to con!rmoutcome and results identify lessons learned and

develop an action plan. -valuate and chec' the actualperformance and outcomes of the ne# or changedservice against the predicted performance and outcomes"i.e. the service e=pected by the user or customer$.

evise and implement a scheme to nurture and facilitatea 'no#ledge8sharing culture.

Identify validate and classify diverse sources of internaland e=ternal information re4uired to enable e6ective useand operation of business processes and I5 services.

rganise information based on classi!cation criteria.Identify and create meaningful relationships bet#een

information elements and enable use of information.Identify o#ners and de!ne and implement levels ofaccess to 'no#ledge resources.

)ropagate available 'no#ledge resources to relevantsta'eholders and communicate ho# these resources canbe used to address di6erent needs "e.g. problem solvinglearning strategic planning and decision ma'ing$.

/easure the use and evaluate the currency and

relevance of information.


27/301

&overnance Practice

/anage assets from procurement to disposal to ensurethat assets are utilised as e6ectively and e;ciently as

possible and are accounted for and physically protected.


28/301

2B of (01

Listed below are the activities associated with each of the governance and

Activities* -rr*02

Area Domain Process Practice ID Practice "ame

,overnance -/01 -/01.01

,overnance -/01 -/01.01

,overnance -/01 -/01.01

,overnance -/01 -/01.01

,overnance -/01 -/01.01

,overnance -/01 -/01.01

The activities are sorted in the order in which the% appear in COBIT 5: Ena

ProcessID

-valuate irectand /onitor

-nsure ,overnance3rame#or' Settingand /aintenance

-valuate thegovernance system.

















29/301

2 of (01

Area Domain Process Practice ID Practice "ameProcess

ID

,overnance -/01 -/01.01

,overnance -/01 -/01.01

,overnance -/01 -/01.02

,overnance -/01 -/01.02

,overnance -/01 -/01.02

,overnance -/01 -/01.02

,overnance -/01 -/01.02

,overnance -/01 -/01.02









irect the governancesystem.

















30/301

(0 of (01


ID

,overnance -/01 -/01.0(

,overnance -/01 -/01.0(

,overnance -/01 -/01.0(

,overnance -/01 -/01.0(

,overnance -/01 -/01.0(

,overnance -/01 -/01.0(

,overnance -/02 -/02.01

,overnance -/02 -/02.01



/onitor thegovernance system.


















-valuate valueoptimisation.





31/301

(1 of (01


ID

,overnance -/02 -/02.01

,overnance -/02 -/02.01

,overnance -/02 -/02.01

,overnance -/02 -/02.01

,overnance -/02 -/02.01

,overnance -/02 -/02.01

,overnance -/02 -/02.02

,overnance -/02 -/02.02










-valuate irect

and /onitor

-nsure 9ene!ts

elivery

-valuate value

optimisation.









irect valueoptimisation.





32/301

(2 of (01


ID

,overnance -/02 -/02.02

,overnance -/02 -/02.02

,overnance -/02 -/02.02

,overnance -/02 -/02.02

,overnance -/02 -/02.02

,overnance -/02 -/02.0(

,overnance -/02 -/02.0(










-valuate irect

and /onitor

-nsure 9ene!ts

elivery

irect value

optimisation.






/onitor valueoptimisation.





33/301

(( of (01


ID

,overnance -/02 -/02.0(

,overnance -/02 -/02.0(

,overnance -/02 -/02.0(

,overnance -/0( -/0(.01

,overnance -/0( -/0(.01

,overnance -/0( -/0(.01

,overnance -/0( -/0(.01

,overnance -/0( -/0(.01

,overnance -/0( -/0(.01

,overnance -/0( -/0(.02

,overnance -/0( -/0(.02

,overnance -/0( -/0(.02











-nsure


34/301

( of (01


ID

,overnance -/0( -/0(.02

,overnance -/0( -/0(.02

,overnance -/0( -/0(.02

,overnance -/0( -/0(.0(

,overnance -/0( -/0(.0(

,overnance -/0( -/0(.0(

,overnance -/0( -/0(.0(

,overnance -/0 -/0.01





-nsure


35/301

( of (01


ID







,overnance -/0 -/0.0(








-nsure


36/301

(? of (01


ID







/anagement A)01 A)01.01







-nsure Sta'eholder5ransparency

irect sta'eholdercommunication andreporting.

-valuate irectand /onitor -nsure Sta'eholder5ransparency irect sta'eholdercommunication andreporting.



irect sta'eholdercommunication andreporting.



/onitor sta'eholdercommunication.

-valuate irect

and /onitor

-nsure Sta'eholder

5ransparency

/onitor sta'eholder

communication.



/onitor sta'eholdercommunication.

Align )lan andrganise

/anage the I5/anagement3rame#or'

e!ne theorganisationalstructure.

Align )lan and

rganise

/anage the I5

/anagement3rame#or'

e!ne the

organisationalstructure.














37/301

(+ of (01


ID



























Align )lan and

rganise

/anage the I5

/anagement3rame#or'

-stablish roles and

responsibilities.



-stablish roles andresponsibilities.


38/301

(B of (01


ID






/anagement A)01 A)01.0(





















/aintain the enablersof the managementsystem.











39/301

( of (01


ID
























Align )lan and

rganise

/anage the I5

/anagement3rame#or'

Communicate

managementob7ectives anddirection.



Communicatemanagementob7ectives anddirection.



Communicatemanagementob7ectives anddirection.

P


40/301

0 of (01


ID




/anagement A)01 A)01.0?




/anagement A)01 A)01.0+



ptimise theplacement of the I5function.







Align )lan and

rganise

/anage the I5

/anagement3rame#or'

e!ne information

"data$ and systemo#nership.



e!ne information"data$ and systemo#nership.









/anage continualimprovement ofprocesses.

Process


41/301

1 of (01


ID





/anagement A)01 A)01.0B





/anagement A)02 /anage Strategy A)02.01











/anage the I5/anagement

3rame#or'

/anage continualimprovement of

processes.Align )lan andrganise


/aintain compliance#ith policies andprocedures.




Align )lan and

rganise

/anage the I5

/anagement3rame#or'

/aintain compliance

#ith policies andprocedures.








%nderstand enterprisedirection.

Process


42/301

2 of (01


ID


















Align )lan and

rganise

%nderstand enterprise

direction.


Assess the currentenvironmentcapabilities andperformance.







Process


43/301

( of (01


ID

/anagement A)02 /anage Strategy A)02.0(













e!ne the target I5capabilities.







Align )lan andrganise e!ne the target I5capabilities.




Conduct a gapanalysis.








e!ne the strategicplan and road map.



Process


44/301

of (01

Area Domain Process Practice ID Practice "ameID






/anagement A)02 /anage Strategy A)02.0?




/anagement A)0( A)0(.01





Align )lan and

rganise

e!ne the strategic

plan and road map.








Communicate the I5strategy and direction.








/anage -nterpriseArchitecture

evelop theenterprisearchitecture vision.

Align )lan and

rganise

/anage -nterprise

Architecture

evelop the

enterprisearchitecture vision.




Process


45/301

of (01














Align )lan and

rganise

/anage -nterprise

Architecture

evelop the




















Align )lan and

rganise

/anage -nterprise

Architecture

evelop the


Process


46/301

? of (01










e!ne referencearchitecture.







Align )lan andrganise /anage -nterpriseArchitecture e!ne referencearchitecture.







A D i P P ti ID P ti "Process

ID


47/301

+ of (01





/anagement A)0( A)0(.0(
















Select opportunitiesand solutions.







Align )lan and

rganise

/anage -nterprise

Architecture

Select opportunities

and solutions.





ID


48/301

B of (01






























e!ne architectureimplementation.









)rovide enterprisearchitecture services.








ID


49/301

of (01




/anagement A)0 /anage Innovation A)0.01













Create anenvironmentconducive toinnovation.










/aintain anunderstanding of the

enterpriseenvironment.


ID


50/301

0 of (01




/anagement A)0 /anage Innovation A)0.0(








/aintain anunderstanding of theenterpriseenvironment.


/aintain anunderstanding of theenterpriseenvironment.


/onitor and scan thetechnologyenvironment.








Assess the potential ofemergingtechnologies andinnovation ideas.






ID


51/301

1 of (01







/anagement A)0 /anage Innovation A)0.0?










52/301

2 of (01

/anagement A)0 /anage )ortfolio A)0.01








/anagement A)0 /anage )ortfolio A)0.0(


-stablish the targetinvestment mi=.










etermine theavailability andsources of funds.






-valuate and selectprogrammes to fund.


ID


53/301

( of (01



















/onitor optimise andreport on investmentportfolio performance.




ID


54/301

of (01











Align )lan and

rganise

/onitor optimise and

report on investmentportfolio performance.



Align )lan and

rganise

/onitor optimise and

report on investmentportfolio performance.




ID

/ A)0 / ) f li A)0 0 / i i f liAli )l d


55/301

of (01

/anagement A)0 /anage )ortfolio A)0.0 /aintain portfolios.



/anagement A)0 /anage )ortfolio A)0.0?







/anage bene!tsachievement.






ID

/anagement A)0? A)0? 01Align )lan and /anage 9udget and /anage !nance and


56/301

? of (01

/anagement A)0? A)0?.01







/anage 9udget andCosts

/anage !nance andaccounting.















)rioritise resourceallocation.


ID

/anagement A)0? A)0? 02Align )lan and /anage 9udget and )rioritise resource


57/301

+ of (01




/anagement A)0? A)0?.0(










Align )lan and

rganise

/anage 9udget and

Costs

)rioritise resource

allocation.



Create and maintainbudgets.




Align )lan andrganise /anage 9udget andCosts Create and maintainbudgets.





ID

/anagement A)0? A)0? 0(Align )lan and /anage 9udget and Create and maintain


58/301

B of (01





















/odel and allocatecosts.

















ID

/anagement A)0? A)0?.0 /anage costs.Align )lan and /anage 9udget and


59/301

of (01

/anagement A)0? A)0?.0 /anage costs.






















ID

/anagement A)0? A)0?.0 /anage costs.Align )lan and /anage 9udget and


60/301

?0 of (01

g g


/anagement A)0+ A)0+.01






grganise

g gCosts

Align )lan and

rganise

/anage 9udget and

Costs


/anage Euman


61/301

?1 of (01



/anagement A)0+ A)0+.0(








rganise


62/301

?2 of (01









rganise


63/301

?( of (01


/anagement A)0+ A)0+.0? /anage contract sta6.







rganise


64/301

? of (01

/anagement A)0B A)0B.01








rganise


65/301

? of (01




/anagement A)0B A)0B.0(



rganise


66/301

?? of (01









g p p


/anage


67/301

?+ of (01

/anagement A)0 A)0.01 Identify I5 services.










/anage ServiceAgreements









Align )lan and

rganise

/anage Service

Agreements

Catalogue I58enabled

services.



Catalogue I58enabledservices.



Catalogue I58enabledservices.



e!ne and prepareservice agreements.


ID

/anagement A)0 A)0.0(Align )lan andrganise




68/301

?B of (01










/anagement A)10 /anage Suppliers A)10.01


Align )lan and

rganise

/anage Service

Agreements

e!ne and prepare

service agreements.







Align )lan and

rganise

/anage Service

Agreements

/onitor and report

service levels.Align )lan andrganise


/onitor and reportservice levels.













69/301

? of (01


/anagement A)10 /anage Suppliers A)10.02 Select suppliers.




and contracts.

Align )lan andrganise Identify and evaluatesupplier relationshipsand contracts.






ID

/anagement A)10 /anage Suppliers A)10.02 Select suppliers.Align )lan andrganise


70/301

+0 of (01



/anagement A)10 /anage Suppliers A)10.0(







/anage supplierrelationships andcontracts.








ID

/anagement A)10 /anage Suppliers A)10.0(Align )lan andrganise

/anage supplierrelationships andcontracts


71/301

+1 of (01




/anagement A)10 /anage Suppliers A)10.0 /anage supplier ris'.

/anagement A)10 /anage Suppliers A)10.0 /anage supplier ris'.




contracts.

Align )lan and

rganise

/anage supplier

relationships andcontracts.








/onitor supplierperformance andcompliance.






ID

/anagement A)10 /anage Suppliers A)10.0Align )lan andrganise



72/301

+2 of (01



/anagement A)11 /anage Duality A)11.01








compliance.






-stablish a 4ualitymanagement system"D/S$.











Align )lan andrganise -stablish a 4ualitymanagement system"D/S$.




ID

/anagement A)11 /anage Duality A)11.02Align )lan andrganise

e!ne and manage4uality standardspractices and


73/301

+( of (01


/anagement A)11 /anage Duality A)11.0(






pprocedures.


e!ne and manage4uality standardspractices andprocedures.


3ocus 4ualitymanagement oncustomers.



Align )lan and

rganise

3ocus 4uality

management oncustomers.








ID


)erform 4ualitymonitoring controland revie#s.


74/301

+ of (01









Align )lan andrganise )erform 4ualitymonitoring controland revie#s.




)erform 4ualitymonitoring control

and revie#s.








Integrate 4ualitymanagement intosolutions fordevelopment andservice delivery.


Integrate 4ualitymanagement intosolutions fordevelopment andservice delivery.


ID


Integrate 4ualitymanagement intosolutions ford l t d


75/301

+ of (01

/anagement A)11 /anage Duality A)11.0?










76/301

+? of (01



77/301

++ of (01



78/301

+B of (01



79/301

+ of (01



80/301

B0 of (01

/anagement A)1( /anage Security A)1(.01







rganise an IS/S.


-stablish and maintainan IS/S.


-stablish and maintainan IS/S.


e!ne and manage aninformation securityris' treatment plan.







Align )lan and

rganise

e!ne and manage an

information securityris' treatment plan.


ID

/anagement A)1( /anage Security A)1(.02Align )lan andrganise



81/301

B1 of (01


/anagement A)1( /anage Security A)1(.0(








/onitor and revie#the IS/S.










ID

/anagement 9AI01 9AI01.019uild Ac4uire andImplement


/aintain a standardapproach forprogramme andpro7ect management.


82/301

B2 of (01


/anagement 9AI01 9AI01.02 Initiate a programme.



9uild Ac4uire andImplement


/aintain a standardapproach forprogramme andpro7ect management.



9uild Ac4uire and

Implement

/anage

)rogrammes and)ro7ects




ID

/anagement 9AI01 9AI01.02 Initiate a programme.9uild Ac4uire andImplement



83/301

B( of (01













/anage

Date post:	03-Jun-2018
Category:	Documents
Upload:	matrixcruzadas
View:	215 times
Download:	0 times

Cópia de 12.COBIT5 Governance and Management Practices Activities_April2014

Documents