e-Government - ein Prüfungsleitfaden - EUROSAI IT Working Group

55
4.4 Zuordnung zu dem CobiT-Schema 2
Alle Prüfungsformen und -methoden auf strategischer und auf der Durchführungs- und
Anwendungsstufe können dem CobiT-Schema folgendermaßen zugeordnet werden:
Abb. 7 − Zuordnung von Prüfungsformen und –methoden zu den CobiT - Prozessen
CobiT
Domain
Planning &
Organization
Acquisition &
Implementation
Delivery &
Support
Monitoring
CobiT
Domain
Code
Programme
(Strategic)
Project
(Operational)
IS/IR
(Application)
Process
PO1 Define a strategic IT plan X
PO2 Define the information architecture X X
PO3 Determine technological direction X X
PO4 Define the IT organization and relationships X
PO5 Manage the IT investment X X X
PO6 Communicate management aims and direction X X
PO7 Manage human resources X
PO8 Ensure compliance with external requirements X X
PO9 Assess risks X X X
PO10 Manage projects X
PO11 Manage quality X
AI1 Identify automated solutions X
AI2 Acquire and maintain application software X
AI3 Acquire and maintain technology infrastructure X
AI4 Develop and maintain procedures X
AI5 Install and accredit systems X
AI6 Manage changes X
DS1 Define and manage service levels X
DS2 Manage third-party services X
DS3 Manage performance and capacity X
DS4 Ensure continuous service X
DS5 Ensure systems security X
DS6 Identify and allocate costs X
DS7 Educate and train users X
DS8 Assist and advise customers X
DS9 Manage the configuration X
DS10 Manage problems and incidents X
DS11 Manage data X
DS12 Manage facilities X
DS13 Manage operations X
M1 Monitor the processes X X X
M2 Assess internal control adequacy X X
M3 Obtain independent assurance X X
M4 Provide for independent audit X X
2 CobiT- – Control Objectives for Information and Related Technology