Find Resources and Connect with members on topics that interest you.

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

Please sign in to see your topics.

COBIT Focus - Adopting COBIT 5 in a Government Entity

Join authors Sean Atkinson and Roger F. Aucoin as they respond to ISACA member questions beginning 19 January 2015. Add your questions by responding to this post!

You must be logged in and be a member of this group* to participate.
*After logging in click "Join this Community" to the right and then return to this page by clicking the back button. As a member of this topic you can now view this and other discussions from the topic homepage.


Imagine being on the ground floor of a new government agency in the United States, first conceived in 1994 and implemented in 2012, with the initial responsibility of developing an information system that would eventually process well over US $1 billion in payments monthly, produce enterprisewide reporting, be implemented as Software as a Service (SaaS) to more than 85,000 users in 72 external agencies and by more than 100,000 vendors. Further, imagine that your responsibility included ensuring that the fledgling enterprise accomplished this mission while following its documented processes and procedures.

Where to begin? How would one know whether existing processes were sufficient?

Read the rest of the article here
You must sign in to rate content.
(1 ratings)

Comments

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, folks!

I'm Roger, one of the authors of this paper. Let Sean and I know what you think about how we have used (and are continuing to use) the COBIT 5 framework.

Let's get this discussion started! 


Roger
rogerfaucoin at 1/20/2015 6:57:53 AM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, I think this is a very relevant topic - I've just been given a consulting job to implement IT Governance in one of the government departments. I am working on an approach - but it's too soon to say how it will pan out - but I'm definitely working along the same lines as you. I thinking of drawing up a checklist of criteria per CobIT process - against which I can identify "gaps" in IT Governance structures and processes - then I can use the approach anywhere with greater ease and deliver results in a shorter time as a consultant to my client - hopefully ! Good luck ! Charl.
Charl007 at 1/25/2015 1:21:30 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Lloyd Majeski at 1/25/2015 1:25:46 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Mark Thomas at 1/25/2015 1:26:46 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Hannah656 at 1/25/2015 1:34:45 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Certainly conduct an assessment using the PAM framework !
rphdicicco at 1/28/2015 9:15:29 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity


You brought up a very important first step, that I admit, I didn't consider training on COBIT! I am certified (Foundations v4.1), so it confirms my IDP to add COBIT 5 training.
In the past, I have started with what we have - policies, controls, procedures, etc and gone through similar steps you mentioned to perform a gap analysis. 
This is a great document. May I borrow and use the process flow as part of my approach and report results? I see some improvements that will make what I do, more effective to my audience. Sometimes, it's hard to present the big picture to the business and not overwhelm them. 
Donna746 at 1/29/2015 10:54:40 AM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, Donna746,

Feel free to borrow and use the process flow. Would you mind sharing your modifications and why you made the? You could always email me if you prefer that to posting here.

Thanks -

Roger F Aucoin
rogerfaucoin at 2/12/2015 9:18:43 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

This is a daunting task. From your dissertation, your team decided/approved full implementation of all 37 processes and 210 practices, along with all activities except for 47. Perhaps a selling-job is needed in some organizations. It may be helpful therefore if you could give us please an idea of: a.) how your organization excepts to monitor performance for all 210 practices and remaining 1,065 activities on an ongoing basis; b.) the resource-expense made for phases 1 through 5; c.) the ongoing resource-expense commitment to manage the process improvement cycle (phase 6); and d.) the size of the organization (within the government/enterprise) and benefits from the above, e.g. breach of security, regulatory compliance, performance improvement, savings, etc..
Don Steane at 2/12/2015 1:19:00 PM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Two important processes to a largescale "COBIT Implementation" are EDM01 and APO01. These two processes establish the governance framework and the management system. Whether it is governance, security, multi-supplier management, service delivery, performance management or other area, the initiative needs to be sustainable through an appropriate management system that can direct, control, monitor and improve the respective areas of improvement now and in the future.

What sort of management system, or how sophisticated is the ongoing management of time, cost and quality. How are defects being detected and rework being avoided?
peterhill at 2/12/2015 10:39:41 PM Quote
You must sign in to rate content.
(2 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, folks!

I'm Roger, one of the authors of this paper. Let Sean and I know what you think about how we have used (and are continuing to use) the COBIT 5 framework.

Let's get this discussion started! 


Roger
rogerfaucoin at 1/20/2015 6:57:53 AM
Hello Sean & Roger,

Excellent article, especially given my personal predicament currently. Just like Don & Peter have pointed above, I would really appreciate if you would throw some light on any management systems you may have used to monitor the ongoing activities along with the costs & time for the same. 

I would also like to know if this entire implementation was handled as a series of projects under a specific portfolio or a program or series of programs with constituent projects. 
Rohit Banerjee at 2/24/2015 1:35:22 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hello Sean/Roger, Please allow me to correct myself and replace the word "excepts" with "expects" (re: a.)) Sorry if I threw you off course. Regardless, looking forward to hearing your answer.
Don Steane at 2/24/2015 10:40:02 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hello Sean/Roger, Please allow me to correct myself and replace the word "excepts" with "expects" (re: a.)) Sorry if I threw you off course. Regardless, looking forward to hearing your answer.
Don Steane at 2/24/2015 10:40:02 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, folks!

I'm Roger, one of the authors of this paper. Let Sean and I know what you think about how we have used (and are continuing to use) the COBIT 5 framework.

Let's get this discussion started! 


Roger
rogerfaucoin at 1/20/2015 6:57:53 AM
Hello Sean & Roger,

Excellent article, especially given my personal predicament currently. Just like Don & Peter have pointed above, I would really appreciate if you would throw some light on any management systems you may have used to monitor the ongoing activities along with the costs & time for the same. 

I would also like to know if this entire implementation was handled as a series of projects under a specific portfolio or a program or series of programs with constituent projects. 
Rohit Banerjee at 2/24/2015 1:35:22 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Two important processes to a largescale "COBIT Implementation" are EDM01 and APO01. These two processes establish the governance framework and the management system. Whether it is governance, security, multi-supplier management, service delivery, performance management or other area, the initiative needs to be sustainable through an appropriate management system that can direct, control, monitor and improve the respective areas of improvement now and in the future.

What sort of management system, or how sophisticated is the ongoing management of time, cost and quality. How are defects being detected and rework being avoided?
peterhill at 2/12/2015 10:39:41 PM Quote
You must sign in to rate content.
(2 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

This is a daunting task. From your dissertation, your team decided/approved full implementation of all 37 processes and 210 practices, along with all activities except for 47. Perhaps a selling-job is needed in some organizations. It may be helpful therefore if you could give us please an idea of: a.) how your organization excepts to monitor performance for all 210 practices and remaining 1,065 activities on an ongoing basis; b.) the resource-expense made for phases 1 through 5; c.) the ongoing resource-expense commitment to manage the process improvement cycle (phase 6); and d.) the size of the organization (within the government/enterprise) and benefits from the above, e.g. breach of security, regulatory compliance, performance improvement, savings, etc..
Don Steane at 2/12/2015 1:19:00 PM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, Donna746,

Feel free to borrow and use the process flow. Would you mind sharing your modifications and why you made the? You could always email me if you prefer that to posting here.

Thanks -

Roger F Aucoin
rogerfaucoin at 2/12/2015 9:18:43 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity


You brought up a very important first step, that I admit, I didn't consider training on COBIT! I am certified (Foundations v4.1), so it confirms my IDP to add COBIT 5 training.
In the past, I have started with what we have - policies, controls, procedures, etc and gone through similar steps you mentioned to perform a gap analysis. 
This is a great document. May I borrow and use the process flow as part of my approach and report results? I see some improvements that will make what I do, more effective to my audience. Sometimes, it's hard to present the big picture to the business and not overwhelm them. 
Donna746 at 1/29/2015 10:54:40 AM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Certainly conduct an assessment using the PAM framework !
rphdicicco at 1/28/2015 9:15:29 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Hannah656 at 1/25/2015 1:34:45 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Mark Thomas at 1/25/2015 1:26:46 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Lloyd Majeski at 1/25/2015 1:25:46 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, I think this is a very relevant topic - I've just been given a consulting job to implement IT Governance in one of the government departments. I am working on an approach - but it's too soon to say how it will pan out - but I'm definitely working along the same lines as you. I thinking of drawing up a checklist of criteria per CobIT process - against which I can identify "gaps" in IT Governance structures and processes - then I can use the approach anywhere with greater ease and deliver results in a shorter time as a consultant to my client - hopefully ! Good luck ! Charl.
Charl007 at 1/25/2015 1:21:30 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, folks!

I'm Roger, one of the authors of this paper. Let Sean and I know what you think about how we have used (and are continuing to use) the COBIT 5 framework.

Let's get this discussion started! 


Roger
rogerfaucoin at 1/20/2015 6:57:53 AM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, folks!

I'm Roger, one of the authors of this paper. Let Sean and I know what you think about how we have used (and are continuing to use) the COBIT 5 framework.

Let's get this discussion started! 


Roger
rogerfaucoin at 1/20/2015 6:57:53 AM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity


You brought up a very important first step, that I admit, I didn't consider training on COBIT! I am certified (Foundations v4.1), so it confirms my IDP to add COBIT 5 training.
In the past, I have started with what we have - policies, controls, procedures, etc and gone through similar steps you mentioned to perform a gap analysis. 
This is a great document. May I borrow and use the process flow as part of my approach and report results? I see some improvements that will make what I do, more effective to my audience. Sometimes, it's hard to present the big picture to the business and not overwhelm them. 
Donna746 at 1/29/2015 10:54:40 AM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

This is a daunting task. From your dissertation, your team decided/approved full implementation of all 37 processes and 210 practices, along with all activities except for 47. Perhaps a selling-job is needed in some organizations. It may be helpful therefore if you could give us please an idea of: a.) how your organization excepts to monitor performance for all 210 practices and remaining 1,065 activities on an ongoing basis; b.) the resource-expense made for phases 1 through 5; c.) the ongoing resource-expense commitment to manage the process improvement cycle (phase 6); and d.) the size of the organization (within the government/enterprise) and benefits from the above, e.g. breach of security, regulatory compliance, performance improvement, savings, etc..
Don Steane at 2/12/2015 1:19:00 PM Quote
You must sign in to rate content.
(1 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Two important processes to a largescale "COBIT Implementation" are EDM01 and APO01. These two processes establish the governance framework and the management system. Whether it is governance, security, multi-supplier management, service delivery, performance management or other area, the initiative needs to be sustainable through an appropriate management system that can direct, control, monitor and improve the respective areas of improvement now and in the future.

What sort of management system, or how sophisticated is the ongoing management of time, cost and quality. How are defects being detected and rework being avoided?
peterhill at 2/12/2015 10:39:41 PM Quote
You must sign in to rate content.
(2 ratings)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, I think this is a very relevant topic - I've just been given a consulting job to implement IT Governance in one of the government departments. I am working on an approach - but it's too soon to say how it will pan out - but I'm definitely working along the same lines as you. I thinking of drawing up a checklist of criteria per CobIT process - against which I can identify "gaps" in IT Governance structures and processes - then I can use the approach anywhere with greater ease and deliver results in a shorter time as a consultant to my client - hopefully ! Good luck ! Charl.
Charl007 at 1/25/2015 1:21:30 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Lloyd Majeski at 1/25/2015 1:25:46 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Mark Thomas at 1/25/2015 1:26:46 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

An out-of-office message containing personal information or a comment that violates community policies was deleted by the administrator.
Hannah656 at 1/25/2015 1:34:45 PM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Certainly conduct an assessment using the PAM framework !
rphdicicco at 1/28/2015 9:15:29 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, Donna746,

Feel free to borrow and use the process flow. Would you mind sharing your modifications and why you made the? You could always email me if you prefer that to posting here.

Thanks -

Roger F Aucoin
rogerfaucoin at 2/12/2015 9:18:43 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hi, folks!

I'm Roger, one of the authors of this paper. Let Sean and I know what you think about how we have used (and are continuing to use) the COBIT 5 framework.

Let's get this discussion started! 


Roger
rogerfaucoin at 1/20/2015 6:57:53 AM
Hello Sean & Roger,

Excellent article, especially given my personal predicament currently. Just like Don & Peter have pointed above, I would really appreciate if you would throw some light on any management systems you may have used to monitor the ongoing activities along with the costs & time for the same. 

I would also like to know if this entire implementation was handled as a series of projects under a specific portfolio or a program or series of programs with constituent projects. 
Rohit Banerjee at 2/24/2015 1:35:22 AM Quote
You must sign in to rate content.
(Unrated)

RE: COBIT Focus - Adopting COBIT 5 in a Government Entity

Hello Sean/Roger, Please allow me to correct myself and replace the word "excepts" with "expects" (re: a.)) Sorry if I threw you off course. Regardless, looking forward to hearing your answer.
Don Steane at 2/24/2015 10:40:02 AM Quote
You must sign in to rate content.
(Unrated)

Leave a Comment

* required

You must login to leave a comment.