Find Resources & Connect with members on topics that interest you.

Applications

Audit

Business Processes

Career Management

Cloud Computing/Virtualization

COBIT

Controls and Monitoring

Databases

Fraud and Computer Crime

Governance and Management

Industry

Information Security

IT Service Management

Mobile/Wireless

Operating Systems

Privacy/Data Protection

Regulations

Risk

Standards

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

ME - Monitor and Evaluate

Application Controls

Process Controls

Please sign in to see your topics.

You must be logged in to join this group.

PC2 - Process Ownership

This topic is intended to enable collaboration and sharing of information to facilitate a better understanding and approach to implementing this COBIT control objective based on the risk, value and guidance provided by its corresponding control practices.

Learn more about COBIT and related publications.

Click “Join This Community” to be able to actively participate in discussions and contribute content. You must be an ISACA member to join this topic. Join ISACA now.

 
This Topic Has:
2 Members
0 Online
761 Visits

 Recent Discussions

Community Leader

Knowledge Center Manager

Knowledge Center Manager

Title: Become a Topic Leader!

Points: 3

Process Ownership

Assign an owner for each IT process, and clearly define the role and responsibilities of the process owner. Include, for example, responsibility for process design, interaction with other processes, accountability for the end results, measurement of process performance and the identification of improvement opportunities.

View value and Risk Drivers  help

Hide value and Risk Drivers help


Value Drivers

  • Processes operating smoothly and reliably
  • Processes interacting with each other effectively
  • Process problems and issues identified and resolved
  • Processes continually improved
   Risk Drivers
  • Processes performing unreliably
  • Processes not working together effectively
  • Gaps in process coverage likely
  • Process errors not rectified

View Control Practices  help

Hide Control Practices  help

  1. Assign an owner for each IT process such that responsibility is clear.
  2. Clearly define the role and responsibilities of the process owner. Include, for example, responsibility for process design, interaction with other processes, accountability for the end results, measurements of process performance and the identification of improvement opportunities.
  3. Ensure that the process owner has sufficient authority to implement, drive and improve the process.
  4. Establish process ownership and accountability for the process’s end deliverables, and ensure that ownership and accountabilities are accepted. Assign and communicate unambiguous roles and responsibilities for efficient execution of the key activities and their documentation. Record roles, responsibilities and accountabilities in job descriptions, and ensure that assigned roles are accepted.

 

Discussions: 0 total

Must be a Topic member to contribute

No Results Found

Documents & Publications: 367 total

Must be a Topic member to contribute
View All »
Downloads
Cloud Computing: Business Benefits With Security, Governance and Assurance Perspectives
Posted by ISACA 222 days ago
Cobit Related
COBIT 4.1
Posted by ISACA 223 days ago
Downloads
ITAF: A Professional Practices Framework for IT Assurance
Posted by ISACA 341 days ago
Downloads
Val IT Framework 2.0
Posted by ISACA 344 days ago
Downloads
Introduction to the Business Model for Information Security (BMIS)
Posted by ISACA 397 days ago
Downloads
The Risk IT Framework
Posted by ISACA 397 days ago
View All »

Events & Online Learning: 13 total

View All »
3 May 2012
Online
A COBIT 5 Overview
Online
More »
Add to my Outlook
7 May 2012
ISACA International Event
North America CACS 2012
Orlando, Florida, USA
Get the knowledge you need to stay one step ahead of the competition and keep up with changing professional trends at ISACA’s North America CACS Conference.
More »
Add to my Outlook
10 May 2012
Online
5 Essential Facts About COBIT 5
Online
More »
Add to my Outlook
15 May 2012
ISACA International Event
Microsoft Security Development Conference
Washington, DC, USA
More »
Add to my Outlook
12 Jun 2012
ISACA International Event
Training Dallas Texas USA
Dallas, Texas, USA
ISACA Training is a unique educational event designed to provide the tools you need to maintain, update and upgrade your skills, and to continue your professional development.
More »
Add to my Outlook
Register Now
23 Jun 2012
ISACA International Event
Introduction to COBIT 5 Course
San Francisco, CA, USA
More »
Add to my Outlook
View All »

Journal Articles: 825 total

View All »
Volume 2, 2019
Standards, Guidelines, Tools and Techniques
by ISACA Member and Certification Holder Compliance
Volume 3, 2012
Project Portfolio Management
by Aarni Heiskanen, LJK
A program or project portfolio explains how an organization is implementing its strategy with projects.
Volume 3, 2012
Cloud Computing as an Integral Part of a Modern IT Strategy
by Kai-Uwe Ruhse, CISA, PCI QSA, and Maria Baturova
This article describes real cloud computing project case studies, which show that moving to the cloud is an important strategic decision for IT managers.
Volume 3, 2012
Auditing Applications, Part 1
by Tommie W. Singleton, Ph.D., CISA, CGEIT, CITP, CPA
This two-part article describes one framework for performing effective audits of applications.
Volume 3, 2012
A Primer on Nonrelational, Distributed Databases for IS Professionals
by Steve Markey
Once thought of as a technology solely for academia, non-RDBMS are now reaching critical mass in industry.
Volume 3, 2012
SOC Progress Report
by Brian Vazzana, CISA, CITP, CPA
SOC reports examine the controls present at the service organizations and consider how those controls are designed and operate.
View All »

User Contributed External Links: 0 total

Wikis: 2 total

Blog Posts: 132 total

View All »
20 May 2012
Auditing OS/400 Passwords
On the AS/400 (System i) it is possible to audit for default passwords using the ANZDFTPWD command. A default password is defined as a password which is the same as the user profile. The command behaves slightly differently depending on the value of the s...
Posted By : Ian Cooke | 0 comments
16 May 2012
Contagion of the ISO 27001
Having been associated with the BS 7799 from its introduction as a Security Standard, and as a Contributor to the ISO 27001, and the last and final Chair of the ISO 27001 at the Department of Trade and Industry (DTI) I have been a long term supporter, and...
Posted By : John379 | 0 comments
12 May 2012
Understanding the Business Environment the Key to Value-Add Auditing
Gone are the days of check list auditing (Tick and bash audit). To add value to business auditors need to go beyond check listing. Be it an application control review (ACR), IT General Controls Review (ITGCR), A project review or an integrated audit, i...
Posted By : Tichaona Zororo CISA, CISM, CRISC, CGEIT | 0 comments
8 May 2012
How do I become an IT Auditor?
During my audits, training & teaching sessions one of the frequent queries I came across is 'Sir, How do I become an IT Auditor? What are the qualification criteria?' The best answer for this to quote from the famous book, Information Systems Control and ...
Posted By : KvR | 0 comments
30 Mar 2012
Auditing Oracle using CAATs – Bringing It All Together
The main idea I am trying to advocate with these posts is a simple one.  Compare a database you are auditing against a database that you know already meets the standards required by the organisation you are auditing. This is achieved by creating “CSV ty...
Posted By : Ian Cooke | 1 comments
28 Mar 2012
The Privacy Lock On Your Phone
New post on IT Grackle: "The Privacy Lock On Your Phone" http://goo.gl/qMNfC #mobile #security
Posted By : Calvin Powers | 0 comments
View All »
Report An Issue