Conveying IT risks in terms of business risks

Assignment Help Basic Computer Science

Reference no: EM132762004

Introduction

Ask any IT manager about the challenges in conveying IT risks in terms of business risks, or about translating business goals into IT goals. It's a common difficulty, as the worlds of business and IT do not inherently align. This lack of alignment was unresolved until ISACA developed a framework called COBIT, first released in 1996. ISACA is an IT professionals' association centered on auditing and IT governance. This lab will focus on the COBIT framework. The lab covers two released versions: COBIT 4.1, which is currently the most implemented version, and COBIT 5, which was released in June 2012. A newer version, COBIT 2019, was released in 2019.

Because COBIT 4.1 is freely available, with registration, at the time of this writing, the lab uses this version to present the handling of risk management. COBIT presents this topic using a set of COBIT control objectives called P09. COBIT P09's purpose is to guide the scope of risk management for an IT infrastructure. The COBIT P09 risk management controls help organize the identified risks, threats, and vulnerabilities, enabling you to manage and remediate them. This lab will also present how COBIT shifts from the term "control objectives" to a set of principles and enablers in later versions.

In this lab, you will define COBIT P09, you will describe COBIT P09's six control objectives, you will explain how the threats and vulnerabilities align to the definition for the assessment and management of risks, and you will use COBIT P09 to determine the scope of risk management for an IT infrastructure.

Define what COBIT (Control Objectives for Information and related Technology) P09 risk management is for an IT infrastructure.

Describe COBIT P09's six control objectives that are used as benchmarks for IT risk assessment and risk management.

Explain how threats and vulnerabilities align to the COBIT P09 risk management definition for the assessment and management of IT risks.

Use the COBIT P09 controls as a guide to define the scope of risk management for an IT infrastructure.

Apply the COBIT P09 controls to help organize the identified IT risks, threats, and vulnerabilities.

Reference no: EM132762004

Questions Cloud

Identify network that you are familiar : Identify a network that you are familiar with at home or at work. List at least 3 hardware components. What do they each do?

High capacity enterprise solution processing : Describe the key architecture points in a high capacity enterprise solution processing over 100/000 TPS?

Impact of training & development on productivity and wags : Presentation on Project - The impact of training & development on productivity & wags

Describe how the BIOS boots : Briefly describe how the BIOS boots or starts the computer and the operating system.

Conveying IT risks in terms of business risks : Ask any IT manager about the challenges in conveying IT risks in terms of business risks, or about translating business goals into IT goals.

Interest from the top journal of bigdata : Select five articles related to the area of interest from the top journal of bigdata.

Organizational performance is fifth aspect of model : Organizational performance is the fifth aspect of the model, reflect on the question, do certain leadership behaviors improve

What are three risks and threats of the user domain : What are three risks and threats of the user domain? Why do organizations have acceptable use policies (AUPs)?

Differences between machine learning and deep learning : Discuss the process that generates the power of AI and discuss the differences between machine learning and deep learning.

User Account

All Pages