Enabling Processes

APO01 Process Practices, Inputs/Outputs and Activities (cont.)
CHAPTER 5
COBIT 5 PROCESS REFERENCE GUIDE CONTENTS
Management Practice Inputs Outputs
APO01.05 Optimise the placement of the IT function.
Position the IT capability in the overall organisational
structure to reflect an enterprise model relevant to
the importance of IT within the enterprise, specifically
its criticality to enterprise strategy and the level of
operational dependence on IT. The reporting line of the
CIO should be commensurate with the importance of IT
within the enterprise.
From Description Description To
Outside COBIT � ���������� ���������
model
� ���������� ��������
Evaluation of options for IT
organisation
Defined operational
placement of IT function
APO03.02
APO03.02
Activities
1. Understand the context for the placement of the IT function, including an assessment of the enterprise strategy and operating model (centralised,
federated, decentralised, hybrid), importance of IT, and sourcing situation and options.
2. Identify, evaluate and prioritise options for organisational placement, sourcing and operating models.
3. Define placement of the IT function and obtain agreement.
Management Practice Inputs Outputs
APO01.06 Define information (data) and
From Description Description To
system ownership.
Define and maintain responsibilities for ownership of
information (data) and information systems. Ensure that
owners make decisions about classifying information
and systems and protecting them in line with
Data classification
guidelines
APO03.02
BAI02.01
DSS05.02
DSS06.01
this classification.
Data security and control
guidelines
BAI02.01
Activities
Data integrity procedures BAI02.01
DSS06.01
1. Provide policies and guidelines to ensure appropriate and consistent enterprisewide classification of information (data).
2. Define, maintain and provide appropriate tools, techniques and guidelines to provide effective security and controls over information and information
systems in collaboration with the owner.
3. Create and maintain an inventory of information (systems and data) that includes a listing of owners, custodians and classifications. Include systems
that are outsourced and those for which ownership should stay within the enterprise.
4. Define and implement procedures to ensure the integrity and consistency of all information stored in electronic form such as databases, data
warehouses and data archives.
Management Practice Inputs Outputs
APO01.07 Manage continual improvement
From Description Description To
of processes.
Assess, plan and execute the continual improvement
of processes and their maturity to ensure that they are
capable of delivering against enterprise, governance,
EDM01.03 Feedback on governance
effectiveness and
performance
Process capability
assessments
MEA01.03
���������� ��� ������� ����������� �������� ����� MEA03.02 Updated policies, Process improvement All APO
process implementation guidance, emerging standards,
principles, procedures opportunities
All BAI
compliance requirements, automation opportunities, and
and standards
All DSS
the feedback of process users, the process team and
All MEA
other stakeholders. Update the process and consider
impacts on process enablers.
Performance goals and
metrics for process
improvement tracking
MEA01.02
Activities
1. Identify business-critical processes based on performance and conformance drivers and related risk. Assess process capability and identify
improvement targets. Analyse gaps in process capability and control. Identify options for improvement and redesign of the process. Prioritise initiatives
for process improvement based on potential benefits and costs.
2. Implement agreed-on improvements, operate as normal business practice, and set performance goals and metrics to enable monitoring of
process improvements.
3. Consider ways to improve efficiency and effectiveness (e.g., through training, documentation, standardisation and automation of the process).
4. Apply quality management practices to update the process.
5. Retire outdated processes, process components or enablers.
Personal Copy of: Mr. Dong Hong Wang
55
Align, Plan and Organise