5

IT Governance Framework
Mapping
Kelompok 5
5207100062 Nuraisa Novia H
5207100084 Umi Salama
5207100112 Gemala Yanuarita
5207100114 Fitri Linawati
5208100081 Siti Mariatul
5208100707 Fia Mahanani
 Overview
• COBIT (PO, AI, DS, ME)
• ITIL V3 (SS, SD, ST, SO, CSI)
• ISO 38500 (Principle 1-6)
Mapping 1
5
ISO 38500 VS ITIL V3
ISO 38500 Vs ITIL V3 Umi Vs Novi

RESPONSIBILITY
Assigning and understanding responsibilities

ITIL V3 ITIL V3
SERVICE TRANSITION SERVICE STRATEGY
• Transition Planning & • Strategy Generation
Support • IT Financial Management
• Change Mgmt.
SERVICE DESIGN
• Service Asset & • Service Catalogue Mgmt.
Configuration Mgmt • Service Level Mgmt.
• Release & Deployment • Avalibility Mgmt.
Mgmt • Capacity Mgmt.
• Service Validation & Testing • IT Service Continuity Mgmt.
• Evaluation • Information Security Mgmt.
• Knowledge Mgmt • Supplier Mgmt.
ISO 38500 Vs ITIL V3 Umi Vs Novi

RESPONSIBILITY
Assigning and understanding responsibilities

ITIL V3 ITIL V3
CSI SERVICE OPERATION
• Service Reporting • Incident Mgmt
• Service Measuremen & • Problem Mgmt
Control
• ROI on CSI
ISO 38500 Vs ITIL V3 Umi Vs Novi

STRATEGY
Satisfying the organization’s Business strategy

ITIL V3 ITIL V3

SERVICE DESIGN SERVICE STRATEGY

• Service Catalogue Mgmt. • Strategy Generation
• Service Level Mgmt. • IT Financial Mgmt.
• Avalibility Mgmt. • Service Portofolio Mgmt.
• Capacity Mgmt. • Demand Mgmt.
• IT Service Continuity Mgmt.
• Information Security Mgmt.
ISO 38500 Vs ITIL V3 Umi Vs Novi

STRATEGY
Satisfying the organization’s Business strategy

ITIL V3 ITIL V3
SERVICE OPERATION SERVICE TRANSITION
• Problem Mgmt • Transition Planning &
Support
• Change Mgmt.
• Release & Deployment
Mgmt
• Service Validation & Testing
• Evaluation
ISO 38500 Vs ITIL V3 Umi Vs Novi

ACQUISITION
IT acquisition and investation

ITIL V3 ITIL V3

SERVICE DESIGN SERVICE STRATEGY

• Service Catalogue Mgmt.
• Service Level Mgmt.
• Avalibility Mgmt.
• Capacity Mgmt.
• Supplier Mgmt.
• Strategy Generation
• IT Financial Mgmt.
• Service Portofolio Mgmt.
• Demand Mgmt.
ISO 38500 Vs ITIL V3 Umi Vs Novi

ACQUISITION
IT acquisition and investation

ITIL V3 ITIL V3
SERVICE TRANSITION CSI
• Transition Planning & • ROI on CSI
Support
• Change Mgmt.
• Release & Deployment
Mgmt
• Service Validation & Testing
• Evaluation
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

ISO 38500 ITIL V3
SERVICE TRANSITION
• Transition Planning &
Support
• Change Mgmt.
PERFORMANCE • Service Asset &
Condition handling/Implementation Configuration Mgmt
• Release & Deployment
Mgmt
• Service Validation & Testing
• Evaluation
• Knowledge Mgmt
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

ISO 38500 ITIL V3
SERVICE STRATEGY
PERFORMANCE • IT Financial Mgmt.
Future Strategic Decision
• Service Portofolio Mgmt.
• Demand Mgmt.

CSI
PERFORMANCE • Service Reporting
In line with org. development • Service Measuremen &
Control
• ROI on CSI
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

ISO 38500 ITIL V3

PERFORMANCE
Business Practices Alignment
SERVICE OPERATION
• Event Mgmt.
• Incident Mgmt.
• Access Mgmt.
• Problem Mgmt.
• Request Fulfillment
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

ISO 38500 ITIL V3
SERVICE STRATEGY
CONFORMANCE
Aligning with rules and regulations
• IT Financial Mgmt.
• Service Portofolio Mgmt.
• Demand Mgmt.
CSI
CONFORMANCE • Service Reporting
Staying up to date with rules
and regulations • Service Measuremen &
Control
• ROI on CSI
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

CONFORMANCE SERVICE DESIGN

Creating good standard and guidance • Service Catalogue Mgmt.
• Service Level Mgmt.
• Avalibility Mgmt.
• Capacity Mgmt.
SERVICE OPERATION • IT Service Continuity Mgmt.
• Event Mgmt. • Information Security Mgmt.
• Incident Mgmt. • Supplier Mgmt.
• Access Mgmt.
CONFORMANCE
• Problem Mgmt. The existing practices is based on rules
• Request Fulfillment and regulations
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

ISO 38500 ITIL V3

HUMAN BEHAVIOUR SERVICE DESIGN

Ketepatan Guna
• Service Catalogue Mgmt.
• Service Level Mgmt.
• Avalibility Mgmt.
• Capacity Mgmt.
• Supplier Mgmt.
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

ISO 38500 ITIL V3
SERVICE TRANSITION
HUMAN BEHAVIOUR • Transition Planning &
Penanganan pihak yang terlibat
Support
• Change Mgmt.
• Service Asset &
Configuration Mgmt
• Release & Deployment
Mgmt
• Service Validation & Testing
• Evaluation
• Knowledge Mgmt
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

ISO 38500 ITIL V3

HUMAN BEHAVIOUR SERVICE OPERATION

Kepentingan pelaksana dan pemakai
• Event Mgmt.
• Incident Mgmt.
• Access Mgmt.
• Problem Mgmt.
• Request Fulfillment
ISO 38500 Vs ITIL V3 Umi Vs Novi

mapping iso 38500 to itil v3

ISO 38500 ITIL V3

CSI
HUMAN BEHAVIOUR • Service Reporting
Mampu memenuhi kebutuhan • Service Measuremen &
manusia di setiap perkembangan Control
• ROI on CSI
Mapping 2
5
ISO 38500 VS COBIT
ISO 38500 Vs COBIT Gemala Vs Lina
ISO 38500 CobiT

Sumber: http://itgovernance.com/web/content/view/40/1/ (picture remade by arman)

 Principle 1
Responsibility
PO4 PO6
Define the IT Processes, Communicate
Organisation and Management Aims
Relationships and Direction

PO7 DS1
Manage IT Define and Manage
Human Resources Service Levels

ISO 38500 Vs COBIT Gemala Vs Lina

 Principle 2
Strategy
PO1 PO2
Define Strategic Define the
IT Plan information structure

PO3 PO5
Determine
Technological Manage the IT
Direction Investment
ISO 38500 Vs COBIT Gemala Vs Lina
 Principle 3
Acquisition
PO6 PO10 AI1
Communicate
Management Aims Manage Identify Automated
and Direction Projects Solutions

AI2
AI3 AI6
Acquire and Maintain
Acquire and Maintain
Technology Manage
Application Software
Infrastructure Changes

AI7 DS2
DS1
Install and Accredit
Solutions and
Define and Manage Manage Third-
Changes Service Levels party Services

ISO 38500 Vs COBIT Gemala Vs Lina

 Principle 4
Performance
DS4 DS5 DS6
Ensure Continuous Ensure Systems Identify and
Service Security Allocate Costs

DS8 DS9 DS10

Manage Service Manage the Manage
Desk and Incidents Configuration Problems

DS12 DS13
DS11 Manage the Physical Manage
Manage Data Environment Operations

ISO 38500 Vs COBIT Gemala Vs Lina

Principle 5
Conformance

PO4
ME1
Define the IT Processes,
Monitor and Evaluate
Organisation and
Relationships IT Performance

ME3
ME2
Ensure Compliance
Monitor and Evaluate
With External
Internal Control
Requirements
 Principle 6
Human Behaviour
PO4 PO7
Define the IT Processes,
Organisation and Manage IT
Relationships Human

AI4 DS1
Enable Operation Define and Manage
and Use Service Levels

ISO 38500 Vs COBIT Gemala Vs Lina

Mapping 3
5
COBIT VS ITIL
 Service Strategy
Plan & Organize
Service Design
Cobit 4

ITIL V3
Acquire &
Implement
Service Transition
Deliver & Support
Service Operation
Monitor &
Evaluate
Continuous Service
Improvement

ITIL V3 Vs COBIT Fia Vs Heni

 Cobit 4 Vs ITIL V3
• ITGI and OGC
• www.ITIL.org

ITIL V3 Vs COBIT Fia Vs Heni

 Peter Weill
• Decision Making Structure
• Alignment Process
• Communication Approach
 COBIT
• PO1 Define a Strategic IT Plan
• PO2 Define the Information Architecture
• PO3 Determine Technological Direction
• PO4 Define the IT Processes, Organisation and Relationships
• PO5 Manage the IT Investment
• PO6 Communicate Management Aims and Direction
• PO7 Manage IT Human Resources
• PO8 Manage Quality
• PO9 Assess and Manage IT Risks
• PO10 Manage Projects

• AI1 Identify Automated Solutions

• AI2 Acquire and Maintain Application Software
• AI3 Acquire and Maintain Technology Infrastructure
• AI4 Enable Operation and Use
• AI5 Procure IT Resources
• AI6 Manage Changes
• AI7 Install and Accredit Solutions and Changes
 COBIT
• DS1 Define and Manage Service Levels
• DS2 Manage Third-party Services
• DS3 Manage Performance and Capacity
• DS4 Ensure Continuous Service
• DS5 Ensure Systems Security
• DS6 Identify and Allocate Costs
• DS7 Educate and Train Users
• DS8 Manage Service Desk and Incidents
• DS9 Manage the Configuration
• DS10 Manage Problems
• DS11 Manage Data
• DS12 Manage the Physical Environment
• DS13 Manage Operations

• ME1 Monitor and Evaluate IT Performance

• ME2 Monitor and Evaluate Internal Control
• ME3 Ensure Compliance With External Requirements
• ME4 Provide IT Governance