Securing an IT Organization through Governance, Risk Management, and Audit

Introduces CobiT5 methods from a cybersecurity perspective. Provides details of Cybersecurity Framework with emphasis on the processes directly related to governance, risk management, and audit. Maps each CSF step and activity to CobiT5 methods, resulting in an extension the CSF objectives with practical and measurable activities. Achieving CSF objectives using CobiT5 methods helps to leverage operational risk understanding in a business context, allowing the ICT organization to be proactive and competitive. This enables proactive value to the ICT organization’s stakeholders, converting high-level enterprise goals into manageable, specific goals rather than an unintegrated checklist model.