COBIT 5: Enabling Information

After completing check-out, your download will be available under MyISACA > Resources.

Enterprises are experiencing increasing difficulty in maintaining control of their data to comply with legal and regulatory requirements.

COBIT 5: Enabling Information is a reference guide that provides a structured way of thinking about information governance and management issues in any type of organization. This structure can be applied throughout the life cycle of information, from conception and design, through building information systems, securing information, using and providing assurance over information, and to the disposal of information.

This guide provides the following three key benefits:

• A comprehensive information model that comprises all aspects of information including:
  • Stakeholders, goals (quality)
  • Life cycle stages
  • Good practices (information attributes)
• Guidance on how to use an established governance and management framework (COBIT 5) to address common information governance and management issues such as:
  • Big data
  • Master data management
  • Information disintermediation
  • Privacy
• An understanding of the reasons and criticality that information needs to be managed and governed in an appropriate way

This guide assists enterprises with information issues and challenges, such as:

• Disparate, uncoordinated data sets are implicated in increasing cost and risk from missed project deadlines, lack of transparency and operational failures
• Records management, legal and IT organizations need a common base reference to coordinate activities, because records retention and legal discovery are of growing concern and cost to managers, and security classifications overlap with record classifications
• The number of data elements with multiple compliance dimensions is increasing. How can an enterprise maintain appropriate practices to comply with relevant global and regional legislation and regulatory and compliance requirements, such as:
  • Payment Card Industry (PCI)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • Health Information Technology for Economic and Clinical Health (HITECH) Act
  • Gramm-Leach-Bliley (GLB) Act
  • European Union (EU) Directive on Data Protection