Enabling Processes

CHAPTER 1
INTRODUCTION
CHAPTER 1
INTRODUCTION
COBIT 5: Enabling Processes complements COBIT 5 (figure 1). This publication contains a detailed reference guide to
the processes that are defined in the COBIT 5 process reference model.
COBIT 5 Enabler Guides
COBIT ® 5:
Enabling Processes
COBIT 5 Professional Guides
COBIT ® 5 Implementation
Figure 1—COBIT 5 Product Family
COBIT ® 5
for Information
Security
COBIT ® 5
COBIT ® 5:
Enabling Information
COBIT ® 5
for Assurance
COBIT ® 5
for Risk
COBIT 5 Online Collaborative Environment
Other Enabler
Guides
Other Professional
Guides
The COBIT 5 framework is built on five basic principles, which are covered in detail, and includes extensive guidance on
enablers for governance and management of enterprise IT.
The COBIT 5 product family includes the following products:
� ����� � ���� ����������
� ����� � ������� ������� �� ����� ���������� ��� ���������� �������� ��� ��������� �� ������� ����� ��������
– COBIT 5: Enabling Processes
– COBIT 5: Enabling Information (in development)
– Other enabler guides (check www.isaca.org/cobit)
� ����� � ������������ ������� ����� ��������
– COBIT 5 Implementation
– COBIT 5 for Information Security (in development)
– COBIT 5 for Assurance (in development)
– COBIT 5 for Risk (in development)
– Other professional guides (check www.isaca.org/cobit)
� � ������������� ������ ������������ ����� ���� �� ��������� �� ������� ��� ��� �� ����� �
This publication is structured as follows:
� �� ������� �� ��� ����� � ����� ������������ ��������� �� ��� ����� � ������������ ������������� ���
complemented with a set of example metrics for enterprise goals and IT-related goals.
� �� ������� �� ��� ����� � ������� ����� �� ��������� ��� ��� ���������� �������� ���� ������� �������� ����
information is included in the detailed process information section. The COBIT 5 process model includes 37 governance
and management processes; this set of processes is the successor to the COBIT 4.1, Val IT and Risk IT processes, and
includes all processes required for end-to-end treatment of governance and management of enterprise IT.
� ������� � ����� ��� ������� �� ��� ������� ��������� ������ ����� ��� ��������� ����� �� ���� ����������
standards and the opinion of experts. It is important to understand that the model and its contents are generic and
not prescriptive, and it has to be adapted to suit the enterprise. Also, the guidance defines practices and activities at a
relatively high level and does not describe how the process procedure is to be defined.
� ������� ����� ���� ������� �� ���� �������������������� ��� �������� ������� ����������� ��� ��� �� ����� �
processes in the process reference model.
� � ������ �� ���������� ��� ���� ���������
– Appendix A contains a mapping between the COBIT 4.1, Val IT 2.0 and Risk IT processes (and their control objectives
or management practices) and their COBIT 5 equivalents.
– Appendices B and C contain the mapping tables from the goals cascade, i.e., mapping enterprise goals to IT-related
goals and IT-related goals to processes.
Personal Copy of: Mr. Dong Hong Wang
11