Find Resources & Connect with members on topics that interest you.

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

Please sign in to see your topics.

You must be logged in to join this group.

AI5.4 - IT Resources Acquisition

This topic is intended to enable collaboration and sharing of information to facilitate a better understanding and approach to implementing this COBIT control objective based on the risk, value and guidance provided by its corresponding control practices.

COBIT Control Objective AI5.4 - IT Resources Acquisition is contained within Process Popup Procure IT Resources.

Learn more about COBIT and related publications.

Click “Join This Community” to be able to actively participate in discussions and contribute content. You must be an ISACA member to join this topic. Join ISACA now.

 
This Topic Has:
2 Members
0 Online
801 Visits

 Recent Discussions

Community Leader

Knowledge Center Manager

Knowledge Center Manager

Title: Become a Topic Leader!

Points: 3


IT Resources Acquisition

Protect and enforce the organisation’s interests in all acquisition contractual agreements, including the rights and obligations of all parties in the contractual terms for the acquisition of software, development resources, infrastructure and services.

View value and Risk Drivers  help

Hide value and Risk Drivers help


Value Drivers

  • Efficient and effective incident management
  • Systems operating as intended and not prone to disruption
  • Incidents able to be solved in a timely manner
  Risk Drivers
  • Software updates not available when needed
  • Software unable to support the business processes
  • Changes to the application unable to be applied as intended
  • System prone to problems and incidents, causing business disruptions

View Control Practices  help

Hide Control Practices  help

  1. Review the technology delivery life cycle and related deliverables and approve deliverables at key points in the acquisition cycle. Ensure that technology updates are available within agreed-upon time frames.
  2. Obtain broad licencing rights and ownership wherever possible and ensure that the supplier is in compliance with applicable regulations.
  3. Confirm that the technology acquired delivers as required, proposed and contractually agreed upon, through oversight, inspection and testing. Oversee the delivery of technology components of identified automated solutions. Test acquired software/hardware resources with the standard test procedures, in appropriate environments and using representative data. Maintain test data confidentiality where applicable. Review documentation and knowledge transfer to enable efficient future maintenance.

 

Discussions: 0 total

Must be a Topic member to contribute

No Results Found

Documents & Publications: 34 total

Must be a Topic member to contribute
View All »
Books
Few businesses could function effectively without their IT systems. At the same time, they depend on IT for more than their day-to-day operations.
Posted by ISACA 56 days ago
Books
Posted by ISACA 229 days ago

Events & Online Learning: 0 total

No Results Found

Journal Articles: 120 total

Volume 3, 2012
by Aarni Heiskanen, LJK
A program or project portfolio explains how an organization is implementing its strategy with projects.
Volume 1, 2012
by Prakhar Srivastava and Tarun Verma
Log management can play a pivotal role in addressing PCI DSS requirements, be a success factor and enabler for safeguarding cardholder transaction data, and provide a secure and vulnerability-free environment for cardholders.
Volume 6, 2011
by Harmeet Kaur, CEH
As today’s business climate demands greater efficiency, security and regulatory compliance, the need for an effective IAM process has never been more pressing.
Volume 5, 2011
by Derek Mohammed, Ph.D., CISA, CISSP, PMP
Organizations need fully articulated security policies and procedures based on industry best practices to solidify their information system defenses and meet legal, contractual and regulatory requirements.
Volume 5, 2011
by Gan Subramaniam, CISA, CISM, CCNA, CCSA, CIA, CISSP, ISO 27001 LA, SSCP
How do you define ‘limited personal use’ of systems, applications and other resources? How do you determine that someone has exceeded the permitted limit? Can any metrics be used to determine whether someone exceeds acceptable limits?
Volume 3, 2011
by William C. Brown, CISA, CPA, and Byron J. Pike, CPA
The US Securities and Exchange Commission (SEC) is planning what could be among the largest changes in the history of American accounting.

Wikis: 2 total

Blog Posts: 5 total

Must be a Topic member to view blog posts
On March 1st,  I was invited to speak at the CampIT conference on Enterprise Risk/Security Management at Rosemont Convention Center. Before me there were two speakers. The first presenter spent an hour presenting the story from the trenches of technolog...
Posted By : Umesh391 | 0 comments
17 Aug 2011
Posted By : masarker | 0 comments
These are five possible ways to discover Unstructured Processes. Regulatory and Compliance processes - People-intensive processes that are kicked off as a result of an external regulatory body and these processes tend to be ad-hoc & on-going change, but...
Posted By : Varun | 1 comments
Se potencia la relación mutua y se acuerda la promoción del Sector TIC de la Comunidad Valenciana. La semana  pasada se llevó a cabo la firma de un convenio de colaboración entre los capítulos valencianos de las asociaciones más importantes a nivel mundia...
Posted By : JavierPeris.Org | 0 comments
8 Jun 2010
Hello, this is my first post on my blog at ISACA.  I feel honored to be among the many members of the ISACA organization and look forward to exchanging ideas, issues, and changes in the Information Security and all of the areas of Risk, Governance, and Co...
Posted By : Donald515 | 0 comments