Organisations should satisfy the quality, fiduciary and security requirements for their information, as for all assets.
Management must also optimise the use of available resources including data, application systems, technology, facilities and people. To discharge these responsibilities, as well as achieve its objectives, management must understand the status of its own IT systems and decide what control it should provide. CobiT helps meet the multiple needs of management by bridging the gaps between business risks, control needs and technology issues.
It provides good practices across a domain and process framework, and it represents activities in the logical and manageable structure.
CobiT’s good practices reflect consensus of the expert.
Book reviews for CobiT
CobiT Security Baseline
IT Governance Implementation