This paper is the result of a joint study initiated by the UK government's Office of Government Commerce and the IT Governance Institute in response to the growing significance of best practices to the IT industry and the need for senior business and IT managers to better understand the value of IT best practices and how to implement them. COBIT can be used at the highest level of IT governance, providing an overall control framework based on an IT process model that is intended by ITGI to generically suit every organisation. Specific practices and standards, such as ITIL and ISO 17799, cover specific areas and can be mapped to the COBIT framework, thus providing a hierarchy of guidance materials.
Related white papers
Web application security: automated scanning versus manual penetration testing
Web sites are vulnerable to Web application attacks and a great percentage of these attacks occur over the HTTP/S protocols, ports that are often exposed to the entire online community....
Risk Management: Bridging Policies and Procedures - Fundamental Security Concepts
One thing that security professionals know is that security is about processes, not about the technology. The key to security is to match the technology to the process, but you...
Does Size Matter? The security challenge of the SMB
Just because a business is small, doesn't mean it's immune to security threats. Security challenges facing Small and Medium Businesses in North America are on the rise. For businesses of...
TechNet Webcast: Best Practices in Planning for and Deploying Volume Activation 2.0 (Level 200)
Volume Activation 2.0, although conceptually and technically simple, is often overlooked during planning and deployment of computers running the Windows Vista and Windows Server 2008 operating systems. This webcast cover...
Pop Art Programming Services
Pop Art possesses extensive knowledge of many programming languages and technologies, allowing to provide the clients with the managed or contract programming services necessary for successful projects. The author's clients...
Provisioning Best Practices for On Demand Data Centers
This paper describes identified best practices for implementing an end-to-end automated provisioning solution. It describes architecture, trade-offs, and lessons learned and best practices derived from experiences during proofs of concept...
IBM Rational Unified Process: Best Practices for Software Davor Gornik Development Teams
This paper presents an overview of the IBM Rational Unified Process. The Rational Unified Process is a software engineering process, delivered through a web-enabled, searchable knowledge base. The process enhances...


