Enabling Processes

Recommendations

Info

Build, Acquire and Implement 166 : ENABLING PROCESSES BAI09 Process Practices, Inputs/Outputs and Activities (cont.) Management Practice Inputs Outputs BAI09.05 Manage licences. Manage software licences so that the optimal number of licences is maintained to support business requirements and the number of licences owned is sufficient to cover the installed software in use. From Description Description To Register of software licences BAI10.02 Results of installed licence audits MEA03.03 �� licence numbers and allocations APO02.05 Activities 1. Maintain a register of all purchased software licences and associated licence agreements. 2. On a regular basis, conduct an audit to identify all instances of installed licenced software. 3. Compare the number of installed software instances with the number of licences owned. 4. When instances are lower than the number owned, decide whether there is a need to retain or terminate licences, considering the potential to save on unnecessary maintenance, training and other costs. �� then, if necessary, purchase additional licences to comply with the licence agreement. 6. On a regular basis, consider whether better value can be obtained by upgrading products and associated licences. BAI09 Related Guidance Related Standard Detailed Reference �� Personal Copy of: Mr. Dong Hong Wang
CHAPTER 5 COBIT 5 PROCESS REFERENCE GUIDE CONTENTS Area: Management BAI10 Manage Configuration Domain: Build, Acquire and Implement Process Description Define and maintain descriptions and relationships between key resources and capabilities required to deliver IT-enabled services, including collecting configuration information, establishing baselines, verifying and auditing configuration information, and updating the configuration repository. Process Purpose Statement Provide sufficient information about service assets to enable the service to be effectively managed, assess the impact of changes and deal with service incidents. The process supports the achievement of a set of primary IT-related goals: IT-related Goal Related Metrics 02 IT compliance and support for business compliance with external laws and regulations � �� impact of reputational loss � �� causing public comment or embarrassment � �� with IT service providers � �� 11 Optimisation of IT assets, resources and capabilities � �� and capabilities 14 Availability of reliable and useful information for decision making � �� (or availability) of management information � �� of information � �� unavailable information was a key factor Process Goals and Metrics Process Goal Related Metrics 1. Configuration repository is accurate, complete and up to date. � �� live configuration � �� configuration information BAI10 RACI Chart Key Management PracticeBoard BAI10.01 Establish and maintain a configuration model. BAI10.02 Establish and maintain a configuration repository and baseline. BAI10.03 Maintain and control configuration items. BAI10.04 Produce status and configuration reports. BAI10.05 �� configuration repository. Chief Executive Officer Chief Financial Officer Chief Operating Officer Business Executives Business Process Owners Strategy Executive Committee �� Chief Risk Officer Chief Information Security Officer Architecture Board Enterprise Risk Committee Head Human Resources Compliance Audit Chief Information Officer C C C C I A R R Head Architect Head Development Head IT Operations Head IT Administration Service Manager C R A R R A C R R R C I I I C C A R I I R R R A R Personal Copy of: Mr. Dong Hong Wang Information Security Manager Business Continuity Manager Privacy Officer 167 Build, Acquire and Implement
Page 1 and 2:
Enabling Processes Personal Copy of
Page 3 and 4:
ACKNOWLEDGEMENTS ISACA wishes to re
Page 5 and 6:
ACKNOWLEDGEMENTS (CONT.) ACKNOWLEDG
Page 7 and 8:
TABLE OF CONTENTS TABLE OF CONTENTS
Page 9 and 10:
LIST OF FIGURES LIST OF FIGURES Fig
Page 11 and 12:
CHAPTER 1 INTRODUCTION CHAPTER 1 IN
Page 13 and 14:
CHAPTER 2. THE GOALS CASCADE AND ME
Page 15 and 16:
Page 17 and 18:
Page 19 and 20:
CHAPTER 3 THE COBIT 5 PROCESS MODEL
Page 21 and 22:
Enabler Performance Management CHAP
Page 23 and 24:
CHAPTER 4 THE COBIT 5 PROCESS REFER
Page 25 and 26:
CHAPTER 5 COBIT 5 PROCESS REFERENCE
Page 27 and 28:
Generic Guidance for Processes CHAP
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
EDM02 Process Practices, Inputs/Out
Page 39 and 40:
Page 41 and 42:
EDM03 Process Practices, Inputs/Out
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
APO01 Process Practices, Inputs/Out
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
APO04 Manage Innovation (cont.) CHA
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
Page 89 and 90:
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
Page 97 and 98:
Page 99 and 100:
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
APO13 Manage Security Process Descr
Page 115 and 116: APO13 Process Practices, Inputs/Out
Page 117 and 118: CHAPTER 5 COBIT 5 PROCESS REFERENCE
Page 123 and 124: BAI01 Process Practices, Inputs/Out
Page 165: CHAPTER 5 COBIT 5 PROCESS REFERENCE
Page 179 and 180: DSS02 Process Practices, Inputs/Out
Page 195 and 196: DSS05 Process Practices, Inputs/Out
Page 205 and 206: MEA01 Process Practices, Inputs/Out
Page 217 and 218:
APPENDIX A MAPPING BETWEEN COBIT 5
Page 219 and 220:
Page 221 and 222:
Page 223 and 224:
Page 225 and 226:
APPENDIX B DETAILED MAPPING ENTERPR
Page 227 and 228:
APPENDIX C DETAILED MAPPING IT-RELA
Page 229 and 230:
Deliver, Service and Support Monito
show all

Enabling Processes

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?