18.01.2013 Views

Enabling Processes

Enabling Processes

Enabling Processes

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

CHAPTER 5<br />

COBIT 5 PROCESS REFERENCE GUIDE CONTENTS<br />

Area: Management<br />

MEA03 Monitor, Evaluate and Assess Compliance with External Requirements<br />

Domain: Monitor, Evaluate and Assess<br />

Process Description<br />

Evaluate that IT processes and IT-supported business processes are compliant with laws, regulations and contractual requirements. Obtain assurance<br />

that the requirements have been identified and complied with, and integrate IT compliance with overall enterprise compliance.<br />

Process Purpose Statement<br />

Ensure that the enterprise is compliant with all applicable external requirements.<br />

The process supports the achievement of a set of primary IT-related goals:<br />

IT-related Goal Related Metrics<br />

02 IT compliance and support for business compliance with external laws<br />

and regulations<br />

� ���� �� �� ��������������� ��������� ����������� ��� ������ ��� ���<br />

impact of reputational loss<br />

� ������ �� ���������� �������������� ������ �������� �� ��� ����� ��<br />

causing public comment or embarrassment<br />

� ������ �� �������������� ������ �������� �� ����������� ����������<br />

with IT service providers<br />

� �������� �� ���������� �����������<br />

04 Managed IT-related business risk � ������� �� �������� �������� ���������� �� �������� ��� ����������<br />

business programmes covered by risk assessment<br />

� ������ �� ����������� ���������� ��������� ���� ���� ��� ���������� ��<br />

risk assessment<br />

� ������� �� ���������� ���� ����������� ��������� ���������� ����<br />

� ��������� �� ������ �� ���� �������<br />

Process Goals and Metrics<br />

Process Goal Related Metrics<br />

1. All external compliance requirements are identified. � ������� ���� ��� ������� �������������� �� �������� ���������� ������<br />

and resolution<br />

� ��������� �� ���������� �������<br />

2. External compliance requirements are adequately addressed. � ������ �� �������� �������������� ������ ���������� ��� ����<br />

� ������� �� ������� ������ ������� ���� ���������� ����������<br />

MEA03 RACI Chart<br />

Key Management PracticeBoard MEA03.01<br />

Identify external<br />

compliance requirements.<br />

MEA03.02<br />

Optimise response to<br />

external requirements.<br />

MEA03.03<br />

������� �������� �����������<br />

MEA03.04<br />

Obtain assurance of<br />

external compliance.<br />

����� ��������� �������<br />

����� ��������� �������<br />

����� ��������� �������<br />

Business Executives<br />

�������� ������� ������<br />

�������� ��������� ���������<br />

�������� ��������������������� ���������<br />

������� ���������� ������<br />

Value Management Office<br />

����� ���� �������<br />

����� ����������� �������� �������<br />

Architecture Board<br />

���������� ���� ���������<br />

���� ����� ���������<br />

����������<br />

Audit<br />

����� ����������� �������<br />

A � � � � �<br />

� � � A � I � � � � I � � � � � � �<br />

I � � � � � I I � A I � � � � � � � � �<br />

I I I I � � I � � A � � � � � � � � �<br />

Personal Copy of: Mr. Dong Hong Wang<br />

Head Architect<br />

Head Development<br />

Head IT Operations<br />

Head IT Administration<br />

Service Manager<br />

Information Security Manager<br />

�������� ���������� �������<br />

������� �������<br />

213<br />

Monitor, Evaluate and Assess

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!