| Preface | p. V |
| List of figures | p. XI |
| List of tables | p. XII |
| Introduction and executive summary | p. 1 |
| Introduction | p. 1 |
| What is governance of enterprise IT? | p. 2 |
| Compliance | p. 4 |
| What are the major focus areas that make up governance of enterprise IT? | p. 4 |
| Overview of this publication | p. 6 |
| What to use? Where to start? | p. 6 |
| What can go wrong if it's not implemented effectively? | p. 7 |
| Implementation tips | p. 8 |
| Appendices | p. 8 |
| The COBIT 5 principles | p. 9 |
| Principle 1: Meeting Stakeholder Needs | p. 10 |
| Principle 2: Covering the enterprise end-to-end | p. 10 |
| Governance enablers | p. 12 |
| Governance scope | p. 12 |
| Roles, activities and relationships | p. 12 |
| Principle 3: Applying a Single, Integrated Framework | p. 14 |
| Stakeholders and stakeholder needs | p. 14 |
| Principle 4: Enabling a Holistic Approach | p. 15 |
| Enablers | p. 16 |
| Systemic governance | p. 16 |
| The generic enabler model | p. 16 |
| The capability attribute for enablers | p. 18 |
| Principle 5: Separating Governance from Management | p. 19 |
| Governance system | p. 19 |
| Management | p. 19 |
| Interactions between governance and management | p. 20 |
| The goals cascade | p. 21 |
| Introduction | p. 21 |
| Using the goals cascade | p. 24 |
| Benefits of the goals cascade | p. 24 |
| Using the goals cascade carefully | p. 25 |
| Metrics | p. 28 |
| Enterprise goal metrics | p. 28 |
| IT-related goal metrics | p. 28 |
| Drivers and benefits | p. 31 |
| Drivers | p. 31 |
| Benefits | p. 31 |
| Detailed description of the enabler models | p. 35 |
| Overview of this section | p. 35 |
| Process model | p. 36 |
| Information model | p. 37 |
| Information quality | p. 38 |
| Organizational structures model | p. 40 |
| Skills and competencies model | p. 43 |
| Principles and policies model | p. 44 |
| Culture, ethics, and behavior model | p. 45 |
| Service capabilities model | p. 46 |
| The process model | p. 49 |
| The process model | p. 49 |
| Governance and management processes | p. 53 |
| Process reference model | p. 53 |
| Process reference guide | p. 55 |
| Governance Domain: Evaluate, Direct, & Monitor | p. 57 |
| EDM01: Ensure governance framework setting and maintenance | p. 58 |
| EDM02: Ensure benefits delivery | p. 58 |
| EDM03: Ensure Risk Optimization | p. 59 |
| EDM04: Ensure Resource Optimization | p. 59 |
| EDM05: Ensure Stakeholder Transparency | p. 60 |
| Management Domain: Align, Plan, & Organize | p. 60 |
| APO01: Manage the IT management framework | p. 61 |
| APO02: Manage strategy | p. 61 |
| APO03: Manage Enterprise Architecture | p. 62 |
| APO04: Manage Innovation | p. 62 |
| APO05: Manage Portfolio | p. 63 |
| APO06: Manage Budget, and Costs | p. 63 |
| APO07: Manage Human Resources | p. 64 |
| APO08: Manage Relationships | p. 64 |
| APO09: Manage Service Agreements | p. 65 |
| APO10: Manage Suppliers | p. 65 |
| APO11: Manage Quality | p. 66 |
| APO12: Manage Risk | p. 66 |
| APO13: Manage Security | p. 67 |
| Management Domain: Build, Acquire & Implement | p. 67 |
| BAI01: Manage Programs and Projects | p. 68 |
| BAI02: Manage requirements definition | p. 68 |
| BAI03: Manage solutions identification and build | p. 69 |
| BAI04: Manage Availability & Capacity | p. 69 |
| BAI05: Manage organizational change enablement | p. 70 |
| BAI06: Manage Changes | p. 70 |
| BAI07: Manage change acceptance and transitioning | p. 71 |
| BAI08: Manage Knowledge | p. 71 |
| BAI09: Manage Assets | p. 72 |
| BAI10: Manage Configuration | p. 72 |
| Management Domain: Deliver, Service & Support | p. 73 |
| DSS01: Manage Operations | p. 73 |
| DSS02: Manage Service Requests and Incidents | p. 73 |
| DSS03: Manage Problems | p. 74 |
| DSS04: Manage Continuity | p. 74 |
| DSS05: Manage Security Services | p. 75 |
| DSS06: Manage Business Process Controls | p. 75 |
| Management Domain: Monitor, Evaluate & Assure | p. 76 |
| MEA01: Monitor, evaluate and assess performance and conformance | p. 76 |
| MEA02: Monitor, evaluate and assess the system of internal control | p. 76 |
| MEA03: Monitor, evaluate and assess compliance with external requirements | p. 77 |
| Implementation guidance | p. 79 |
| Introduction | p. 79 |
| Considering the IT organization context | p. 80 |
| Creating the right environment | p. 81 |
| Recognizing pain-points and event triggers | p. 82 |
| Enabling change | p. 83 |
| A lifecycle approach | p. 83 |
| Getting started: making the business case | p. 85 |
| The process capability model | p. 87 |
| Introduction | p. 87 |
| Benefits of the changes | p. 90 |
| Performing process capability assessments | p. 90 |
| Appendices | |
| Detailed mappings | p. 93 |
| Stakeholder needs and enterprise goals | p. 99 |
| COBIT 5 vs. COBIT 4.1 | p. 105 |
| COBIT 5 and ITGI's five governance focus areas | p. 107 |
| Mapping between COBIT 5 and legacy ISACA frameworks | p. 109 |
| About ISACA® | p. 119 |
| Table of Contents provided by Ingram. All Rights Reserved. |
