Information Security governance: COBIT or ISO 17799 or both?

Estudo Da Maturidade De Processos Cobit Na Eletrobrás

“…Modelos de gestão de TI como o CobiT auxiliam no controle das atividades e baseados nas melhores práticas de mercado. Entretanto não necessitam ser aplicados de forma integral (Von Solms, 2005). Estabelecer padrões de qualidade para a implementação de modelos como este é importante para que seja possível, através de refinamentos sucessivos atingirem níveis de maturidade cada vez mais altos e assim levar a TI a entregar serviços de maior relevância para a área de negócio da empresa.…”

Understanding Components of IT Risks and Enterprise Risk Management

“…COSO and COBIT are commonly used IT control assessment guidelines in organisations nowadays. Solms (2005) (Hillson, 2002). These steps are sometimes iterative and not always taken in sequence.…”

Managing Information Security Risk Using Integrated Governance Risk and Compliance

“…Given the various ITG frameworks and best practices, finding the optimal mix for integrating and implementing ITG frameworks is a major challenge [53] due to their inter-relationships [54]. This difficulty of integration is influenced by many factors namely the complexity of implementing multiple frameworks simultaneously; the reduced learning curve for new hires; the conflicts among IT management, staff, and stakeholders created by differences in their interests regarding ITG framework adoption; the significant burden organizational change can place on staff, creating increased stress and reduced morale and productivity; and staff's need to manage ITG implementation through real work [54].…”