1. CobiT Executive Summary MBA512 - Information Systems and Technology reference "CobiT, 3rd Edition Executive Summary", July 2000CobiT, 3rd Edition Executive Summary

2. CobiT Mission To research, develop, publicize and promote an authoritative, up-to-date, international set of generally accepted information technology control objectives for day-to-day use by business managers and auditors. What does this sound like? The answer is "a sales pitch."

3. Organizations Behind CobiT  Control Objectives for Information and related Technology  Started in 1996 - what are issues that might have spurred the creation of CobiT? AICPA SysTrust

4. Why is it critical to effectively manage information and related technologies? 1.Increasing dependence on information and the systems that deliver this information 2.Increasing vulnerabilities and a wide spectrum of threats, such as cyber threats and information warfare 3.Scale and cost of the current and future investments in information and information systems 4.Potential for technologies to dramatically change organizations and business practices, create new opportunities and reduce costs

5. Increasing dependence on information and the systems that deliver this information  Why is dependence increasing?  Is more information being captured/manipulated using information systems and technology?  Are the abilities of managers to understand and to directly use information systems/technology increasing, becoming stagnant, or decreasing?  What are the implications?

6. Increasing vulnerabilities and a wide spectrum of threats, such as cyber threats and information warfare  What can the company do and who must the company rely on to perform? (i.e., can the company outsource the risk?)  What are some cyber threats?  What is the company's responsibility in case of cyber warfare?

7. Scale and cost of the current and future investments in information and information systems  What costs are beyond the company's ability to pay? A consortium of companies?  What costs are so great that a government has to intervene? Implications for operations in other countries?

8. Potential for technologies to dramatically change organizations and business practices, create new opportunities and reduce costs  How far can organizations see in the future?  What are the risks to a company for looking forward?  What constitutes a "drastic" change in opportunities or costs?

9. "Many organisations recognise the potential benefits that technology can yield. Successful organisations, however, understand and manage the risks associated with implementing new technologies." What would Nicolas Carr say in the "IT Doesn't Matter" article about the quote?

10. What is meant by 'IT governance'? a) the governmental oversight of information systems/technology b) a structure of relationships and processes to direct and control the enterprise in order to achieve goals by adding value while balancing risk versus return c) setting overall control and strategy to a single person in the enterprise, such as the chief information officer ? ? ? ?

11.  CobiT has a business orientation, the main direction is not information systems nor technology  CobiT treats information systems as an asset and then subjects the asset to managerial assessment

12. Information Systems No Longer The "Black Box"  Successful organizations must understand the risks and benefits of information systems and technology - or else they cannot be effectively managed  Management (not technical personnel) are charged to make managerial decisions about risk and return

13. the article states "Emphasis on attaining competitive advantage and cost- efficiency implies an ever-increasing reliance on technology as a major component in the strategies of most organizations." What would Nicolas Carr say in the "IT Doesn't Matter" article about this quote?

14. IT Governance Institutionalizes Optimal Solutions (Or At Least Satisficing Solutions)  How?  Does the institutionalization cause stagnation?  What happens to an organization that does not institutionalize solutions; i.e. they may have a champion for technology but not procedures?

15. Benefits of IT Governance  Increased automation - be effective  Decreased costs - be efficient Discuss the differences between "efficiency" and "effectiveness."

16. CobiT Definitions

17. Critical Success Factors

18. Information and Resources