Domain

PO1
PO2
PO3
PO4

Descripts (Plan and Organise)

Define a strategic IT plan.
Define the information architecture.
Determine technological direction.
Define the IT processes, organisation and
relationships.
PO5
Manage the IT investment.
PO6
Communicate management aims and direction.
PO7
Manage IT human resources.
PO8
Manage quality.
PO9
Assess and manage IT risks.
PO10
Manage projects.
Domain Descripts (Monitor and Evaluate)
ME1
Monitor and evaluate IT performance
ME2
Monitor and evaluate internal control
ME3
Ensure compliance with external requirements
ME4
Provide IT governance

COBIT Control Objectives

Plan and Organise
PO1. Define a strategic IT plan
PO1.1
IT Value Management
PO1.2
Business-IT Alignment
PO1.3
Assessment of Current Capability and Performance
PO1.4
IT Strategic Plan
PO2.Define the Information Architecture
PO2.1
Enterprise Information Architecture Model
PO2.2
Enterprise Data Dictionary and Data Syntax Rules
PO2.3
Data Classification Scheme
PO2.4
Integrity Management
PO3.Determine Technological Direction
PO3.1
PO3.2
PO3.3
PO3.4
PO3.5

Technological Direction Planning

Technology Infrastructure Plan
Monitor Future Trends and Regulations
Technology Standards
IT Architecture Board

PO4.Define the IT Processes, Organization and Relationships

PO4.1
IT Process Framework
PO4.2
IT Strategy Committee
PO4.3
IT Steering Committee
PO4.4
Organizational Placement of the IT Function
PO4.5
IT Organizational Structure
PO4.6
Establishment of Roles and Responsibilities
PO4.7
Responsibility for IT Quality Assurance
PO4.8
Responsibility for Risk, Security and Compliance
PO4.9
Data and System Ownership
PO4.10 Supervision
PO4.11 Segregation of Duties
PO4.12 IT Staffing
PO5.Manage the IT Investment
PO5.1
PO5.2
PO5.3
PO5.4
PO5.5

Financial Management Framework

Prioritization Within IT Budget
IT Budgeting
Cost Management
Benefit Management
PO6.Communicate Management Aims and Direction

PO6.1
PO6.2

IT Policy and Control Environment

Enterprise IT Risk and Control Framework

PO6.3
PO6.4
PO6.5

IT Policies Management
Policy, Standard and Procedures Rollout
Communication of IT Objectives and Direction
PO7.Manage IT Human Resources

PO7.1
PO7.2

Personnel Recruitment and Retention

Personnel Competencies
PO8.Manage Quality

PO8.1
PO8.2
PO8.3
PO8.4
PO8.5
PO8.6

Quality Management System

IT Standards and Quality Practices
Development and Acquisition Standards
Customer Focus
Continuous Improvement
Quality Measurement, Monitoring and Review
PO9.Assess and Manage IT Risks

PO9.1
PO9.2
PO9.3
PO9.4
PO9.5
PO9.6

IT Risk Management Framework

Establishment of Risk Context
Event Identification
Risk Assessment
Risk Response
Maintenance and Monitoring of a Risk Action Plan
PO10.Manage Projects

PO10.1
PO10.2
PO10.3
PO10.4
PO10.5
PO10.6
PO10.7
PO10.8

Program Management Framework

Project Management Framework
Project Management Approach
Stakeholder Commitment
Project Scope Statement
Project Phase Initiation
Integrated Project Plan
Project Resources
ME1.Monitor and valuate IT Performance

ME1.1
ME1.2
ME1.3
ME1.4
ME1.5
ME1.6

Monitoring Approach
Definition and Collection of Monitoring Data
Monitoring Method
Performance Assessment
Board and Executive Reporting
Remedial Actions
ME2.Monitor and Evaluate Internal Control

ME2.1
ME2.2

Monitoring of Internal Control Framework

Supervisory Review

ME2.3
ME2.4

Control Exceptions
Control Self-assessment
ME3.Obtain Independent Assurance

ME3.1
ME3.2
ME3.3
ME3.4
ME3.5

Identification of External Legal, Regulatory

and Contractual Compliance Requirements
Optimization of Response to
External Requirements
Evaluation of Compliance With External
Requirements
Positive Assurance of Compliance
Integrated Reporting
ME4. Provide IT Governance

ME4.1
ME4.2
ME4.3
ME4.4

Establishment of an IT Governance Framework

Strategic Alignment
Value Delivery
Resource Management