COBIT 5 Framework Publications

White Paper

COBIT 5 | Digital | English

COBIT 5 framework provides an end-to-end business view of the governance of enterprise IT that reflects the central role of information and technology in creating value for enterprises. The principles, practices, analytical tools and models found in COBIT 5 embody thought leadership and guidance from business, IT and governance experts around the world.

Resource

COBIT 5 Assurance Laminate Card | Digital | English

A memory aid for the COBIT 5 User. This laminate includes figures from the COBIT 5 publications and provides a quick reference to and overview of key COBIT 5 concepts.

Resource

COBIT 5 for Risk Laminate Card | Digital | English

A memory aid for the COBIT 5 User. This laminate includes figures from the COBIT 5 publications and provides a quick reference to and overview of key COBIT 5 concepts.

Audit Program

DSS06 Manage Business Process Controls Audit Program | Digital | English

The goal of this review is to provide assurance over the DSS06 process that ensures information integrity and the security of information assets handled within business processes in the enterprise or outsourced is maintained.

FREE to ISACA Members: Join Now

Audit Program

DSS05 Manage Security Services Audit Program | Digital | English

The goal of this review is to provide assurance over the DSS05 process that ensures the business impact of operational information security vulnerabilities and incidents are minimised.

FREE to ISACA Members: Join Now

Audit Program

DSS04 Manage Continuity Audit Program | Digital | English

The goal of this review is to provide assurance over the DSS04 process that ensures critical business operations and availability of information at a level acceptable to the enterprise are continued in the event of a significant disruption.

FREE to ISACA Members: Join Now

Audit Program

DSS03 Manage Problems Audit Program | Digital | English

The goal of this review is to provide assurance over the DSS03 process that ensures: Availability is increased, service levels are improved, costs are reduced, and customer convenience and satisfaction is improved by reducing the number of operational problems.

FREE to ISACA Members: Join Now

Audit Program

DSS02 Manage Service Requests and Incidents Audit Program | Digital | English

The goal of this review is to provide assurance over the DSS02 process that ensures increased productivity is achieved and disruptions are minimised through quick resolution of user queries and incidents.

FREE to ISACA Members: Join Now

Audit Program

DSS01 Manage Operations Audit Program | Digital | English

The goal of this review is to provide assurance over the DSS01 process that ensures IT operational service outcomes are delivered as planned.

FREE to ISACA Members: Join Now

Audit Program

BAI10 Manage Configuration Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI10 process that ensures sufficient information about service assets are provided to enable the service to be effectively managed, assess the impact of changes and deal with service incidents.

FREE to ISACA Members: Join Now

Audit Program

BAI09 Manage Assets Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI09 process that ensures all IT assets are accounted for and the value provided is optimised by these assets.

FREE to ISACA Members: Join Now

Audit Program

BAI08 Manage Knowledge Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI01 process that ensures: The realisation of business benefits and the reduction of risk of unexpected delays, costs and value erosion by improving communications to and involvement of business and end users. The value and quality of project deliverables and maximises their contribution to the investment and services portfolio.

FREE to ISACA Members: Join Now

Audit Program

BAI07 Manage Change Acceptance and Transitioning Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI07 process that ensures solutions are implemented safely and in line with the agreed-on expectations and outcomes.

FREE to ISACA Members: Join Now

Audit Program

BAI06 Manage Changes Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI06 process that ensures a fast and reliable delivery of change to the business and mitigation of the risk of negatively impacting the stability or integrity of the changed environment is enabled.

FREE to ISACA Members: Join Now

Audit Program

BAI05 Manage Organizational Change Enablement Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI05 process that ensures stakeholders are prepared and committed to business change and that the risk of failure is reduced.

FREE to ISACA Members: Join Now

Audit Program

BAI04 Manage Availability and Capacity Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI04 process that ensures service availability, efficient management of resources, and optimisation of system performance through prediction of future performance and capacity requirements are maintained.

FREE to ISACA Members: Join Now

Audit Program

BAI03 Manage Solutions Identification and Build Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI03 process that ensures the establishment of timely and cost-effective solutions capable of supporting enterprise strategic and operational objectives.

FREE to ISACA Members: Join Now

Audit Program

BAI02 Manage Requirements Definition Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI02 process that ensures feasible optimal solutions are created that meet enterprise needs while minimising risk.

FREE to ISACA Members: Join Now

Audit Program

BAI01 Manage Programs and Projects Audit Program | Digital | English

The goal of this review is to provide assurance over the BAI01 process that ensures: The realisation of business benefits and the reduction of risk of unexpected delays, costs and value erosion by improving communications to and involvement of business and end users. The value and quality of project deliverables and maximises their contribution to the investment and services portfolio.

FREE to ISACA Members: Join Now

Audit Program

APO13 Manage Security Audit Program | Digital | English

The goal of this review is to provide assurance over the APO13 process that ensures the impact and occurrence of information security incidents are kept within the enterprise's risk appetite levels.

FREE to ISACA Members: Join Now

Audit Program

APO12 Manage Risk Audit Program | Digital | English

The goal of this review is to provide assurance over the APO12 process that ensures: The management of IT-related enterprise risk is integrated with overall ERM. The costs and benefits of managing IT-related enterprise risk are balanced.

FREE to ISACA Members: Join Now

Audit Program

APO11 Manage Quality Audit Program | Digital | English

The goal of this review is to provide assurance over the APO11 process that ensures a consistent delivery of solutions and services to meet the quality requirements of the enterprise and satisfy stakeholder needs.

FREE to ISACA Members: Join Now

Audit Program

APO10 Manage Suppliers Audit Program | Digital | English

The goal of this review is to provide assurance over the APO10 process that ensures the risk associated with non-performing suppliers is minimised. Pricing is competitive.

FREE to ISACA Members: Join Now

Audit Program

APO09 Manage Service Agreements Audit Program | Digital | English

The goal of this review is to provide assurance over the APO09 process that ensures IT services and service levels meet current and future enterprise needs.

FREE to ISACA Members: Join Now

Audit Program

APO08 Manage Relationships Audit Program | Digital | English

The goal of this review is to provide assurance over the APO08 process that ensures improved outcomes, increased confidence, trust in IT and effective use of resources are created.

FREE to ISACA Members: Join Now

Audit Program

APO07 Manage Human Resources Audit Program | Digital | English

The goal of this review is to provide assurance over the APO07 process that ensures human resources capabilities to meet enterprise objectives are optimised.

FREE to ISACA Members: Join Now

Audit Program

APO06 Manage Budget and Costs Audit Program | Digital | English

The goal of this review is to provide assurance over the APO06 process that ensures: There is a partnership between IT and enterprise stakeholders to enable the effective and efficient use of IT-related resources. There is transparency and accountability of the cost and business value of solutions and services. The enterprise is enabled to make informed decisions regarding the use of IT solutions and services.

FREE to ISACA Members: Join Now

Audit Program

APO05 Manage Portfolio Audit Program | Digital | English

The goal of this review is to provide assurance over the APO05 process that ensures a performance of the overall portfolio of programmes in response to programme and service performance and changing enterprise priorities and demands is optimised.

FREE to ISACA Members: Join Now

Audit Program

APO04 Manage Innovation Audit Program | Digital | English

The goal of this review is to provide assurance over the APO04 process that ensures competitive advantage, business innovation, and improved operational effectiveness and efficiency are achieved by exploiting information technology developments.

FREE to ISACA Members: Join Now

Audit Program

APO03 Manage Enterprise Architecture Audit Program | Digital | English

The goal of this review is to provide assurance over the APO03 process that ensures: There is a representation of the different building blocks that make up the enterprise and their inter-relationships as well as the principles guiding their design and evolution over time, enabling a standard, responsive and efficient delivery of operational and strategic objectives.

FREE to ISACA Members: Join Now

Audit Program

APO02 Manage Strategy Audit Program | Digital | English

The goal of this review is to provide assurance over the APO02 process that ensures: The strategic IT plans are aligned with business objectives. The objectives and associated accountabilities are clearly communicated so they are understood by all. The IT strategic options are identified, structured and integrated with the business plans.

FREE to ISACA Members: Join Now

Audit Program

APO01 Manage the IT Management Framework Audit Program | Digital | English

The goal of this review is to provide assurance over the APO01 process that ensures: A consistent management approach to enable the enterprises governance requirements to be met is provided, covering management processes, organisational structures, roles and responsibilities, reliable and repeatable activities, and skills and competencies.

FREE to ISACA Members: Join Now

Audit Program

EDM05 Ensure Stakeholder Transparency Audit Program | Digital | English

The goal of the review is to provide assurance over the EDM05 process that ensures: The communication to stakeholders is effective and timely. The basis for reporting is established to increase performance, identify areas for improvement. IT-related objectives and strategies are confirmed to be in line with the enterprise’s strategy.

FREE to ISACA Members: Join Now

Audit Program

EDM04 Ensure Resource Optimization Audit Program | Digital | English

The goal of the review is to provide assurance over EDM04 process that ensures: The resource needs of the enterprise are met in the optimal manner. IT costs are optimized. There is an increased likelihood of benefit realisation and readiness for future change.

FREE to ISACA Members: Join Now

Audit Program

EDM03 Ensure Risk Optimization Audit Program | Digital | English

The goal of the review is to provide assurance over the EDM03 process that ensures IT-related enterprise risk does not exceed risk appetite and risk tolerance. The impact of IT risk to enterprise value is identified and managed. The potential for compliance failures is minimized.

FREE to ISACA Members: Join Now

Audit Program

EDM02 Ensure Benefits Delivery Audit Program | Digital | English

The goal of the review is to provide assurance over the EDM02 process that ensures: Optimal value from IT-enabled initiatives, services and assets is secured. Delivery of solutions and services is cost-efficient. A reliable and accurate picture of costs and likely benefits is provided so that business needs are supported effectively and efficiently.

FREE to ISACA Members: Join Now

Audit Program

EDM01 Ensure Governance Framework Setting and Maintenance Audit Program | Digital | English

The goal of this review is to provide assurance over the EDM01 process that ensures: A consistent and integrated approach aligned with the enterprise governance approach is provided. IT-related decisions are made in line with the enterprise’s strategies and objectives.

FREE to ISACA Members: Join Now

Book

Configuration Management: Using COBIT 5 | Digital | English

Enterprises continuously experience changes; driven by both external and internal forces. When changes occur in one part of the enterprise without proper communication and coordination, signs of malfunction are likely to manifest as business disruptions, inefficiencies and potential financial losses.

Book

COBIT 5 for Risk | Digital | English

Effectively managing IT risk helps drive better business performance by linking information and technology risk to the achievement of strategic enterprise objectives.

Book

Risk Scenarios: Using COBIT 5 for Risk | Digital | English

Risk Scenarios: Using COBIT 5 for Risk provides practical guidance on how to use COBIT 5 for Risk to solve for current business issues. The publication provides a high level overview of risk concepts, along with over 60 complete risk scenarios covering all 20 categories described in COBIT 5 for Risk.

Book

Vendor Management: Using COBIT 5 | Digital | English

Vendors constitute an important part of an enterprise's external environment. The increased use of outsourcing and cloud computing implies that vendors are taking on an increasingly fundamental role in the operations of an enterprise.

Book

COBIT Assessor Guide: Using COBIT 5 | Digital | English

This companion to the COBIT® Process Assessment Model (PAM): Using COBIT® 5 provides details on how to undertake an assessment, while the COBIT PAM provides details on the basis for the assessment.

Book

COBIT Self-Assessment Guide: Using COBIT 5 | Digital | English

COBIT Self-Assessment Guide: Using COBIT 5 is a "stand-alone" publication, which can be used by organisations to perform a less rigorous assessment of the capability of their IT processes.

FREE to ISACA Members: Join Now

Book

COBIT 5: Enabling Information | Digital | English

Enterprises are experiencing increasing difficulty in maintaining control of their data to comply with legal and regulatory requirements.

FREE to ISACA Members: Join Now

Book

COBIT 5: Enabling Processes | Digital | English

This publication complements COBIT 5 and contains a detailed reference guide to the processes defined in the COBIT 5 process reference model.

Book

COBIT 5 for Information Security | Digital | English

COBIT 5 for Information Security is a COBIT 5 Professional Guide. It examines COBIT 5 from a security view, placing a security lens over the concepts, enablers and principles within COBIT 5.

Book

Securing Mobile Devices | Digital | English

Securing Mobile Devices should be read in the context of the existing publications COBIT 5 for Information Security, Business Model for Information Security (BMIS) and COBIT 5 itself.

Book

COBIT Process Assessment Model: Using COBIT 5 | Digital | English

With technology playing an increasingly central role in enterprise success, IT leaders are under growing pressure to help drive revenue and enable business change. Maintaining the quality of IT service delivery is becoming more and more difficult due to increases in cloud computing adoption, mobile device use, autonomous employees and business units and threats to data privacy and security.

FREE to ISACA Members: Join Now

Book

COBIT 5 for Assurance | Digital | English

With information and technology at the heart of creating value for enterprises, it is more important than ever for organizations to optimize their IT assurance approach in order to effectively identify related risks and opportunities.

Book

A Practical Guide to the Payment Card Industry Data Security Standard | Print | English

This book explains the security requirements, processes and technologies that are required to implement the Payment Card Industry Data Security Standard (PCI DSS) which is a compliance requirement for all enterprises that process, store, transmit or access cardholder information for any of the major payment brands, such as American Express®, Discover®, JCB, MasterCard® and VISA® brands.

Book

Implementing a Privacy Protection Program: Using COBIT 5 Enablers With ISACA Privacy Principles | Print | English

Privacy breaches can cause a cascade of negative impacts on enterprises, as well as significant harm to the associated data subjects. Enterprises may suffer financial loss and reputational damage, be charged with failure to comply with regulations and legislation, and alienate key stakeholders who demand safety of personal information.

White Paper

Getting Started with Data Governance Using COBIT 5 | Digital | English

Most enterprises have some form of risk management. However, it may be driven primarily by compliance needs and emerging threats, making it a reactive function instead of a proactive one.

1 October 2017

White Paper

Internal Control Using COBIT 5 | Digital | English

Internal controls are often not well understood in business. Contrary to some misinformed opinions, internal controls are not onerous rules that exist to make work cumbersome or more difficult.

1 March 2016

White Paper

Benchmarking and Business Value Assessment of COBIT 5 | Digital | English

This report presents the results of an international research project commissioned by ISACA to the University of Antwerp—Antwerp Management School (Belgium), focused on establishing an international benchmark and a business value assessment of COBIT 5.

1 July 2015

White Paper

COBIT 5 Principles: Where Did They Come From? | Digital | English

Governance and management of enterprise information and related technology (GEIT) is ultimately the board of directors’ (or other governing entity’s) responsibility.

1 July 2014

White Paper

Relating the COSO Internal Control—Integrated Framework & COBIT | Digital | English

This white paper takes the refreshed and updated COSO Internal Control—Integrated Framework (the COSO framework) as its base structure and examines how the relevant components and content of the COBIT 5 framework and its supporting guidance deliverables relate to the COSO framework.

1 March 2014

Book

Securing Mobile Devices | Digital | Italian

Proteggere i dispositivi mobili deve essere letto nel contesto delle seguenti pubblicazioni: COBIT 5 for Information Security, Business Model for Information Security (BMIS) e COBIT 5 stesso.

White Paper

COBIT 5 | Digital | German

COBIT 5 ist das übergeordnete Rahmenwerk für die Governance und das Management der unternehmensweiten IT. Dieser Band beschreibt die fünf Prinzipien von COBIT 5 und definiert die sieben unterstützenden Enabler, die Kernelemente des Rahmenwerkes sind.

White Paper

COBIT 5 | Digital | French

COBIT 5 est le référentiel général orienté affaires et gestion destiné à la gouvernance et à la gestion des TI de l’entreprise. Ce manuel décrit les cinq principes de COBIT 5 et définit les sept inducteurs de base qui composent le référentiel.

White Paper

COBIT 5 | Digital | Hungarian

A COBIT 5 a vállalati IT irányításának és menedzsmentjének átfogó üzleti és vezetési keretrendszere. Jelen dokumentum leírja a keretrendszert alkotó öt COBIT 5 alapelvet és a hét lehetové tevo tényezot.

White Paper

COBIT 5 | Digital | Hebrew

תיאור אנא שימו לב: COBIT 5 זמין גם כמסמך PDF להורדה ללא תשלום הן עבור חברים ב- ISACA והן

Home / Resources / COBIT / COBIT 5

COBIT 5 Publications

Featured COBIT 5