Introduction to COBIT® 5 Implementation Tutorial

Introduction to COBIT® 5 Implementation

Welcome to lesson 4 of the COBIT® 5 (read as KOBIT five) tutorial which is a part of COBIT® 5 Foundation Certification Course. This lesson focuses on an introduction to COBIT® 5 implementation.

Let us explore the objectives of this lesson in the next section.

Objectives

By the end of this ‘COBIT® 5 Implementation’ lesson, you will be able to:

• Identify the seven phases of the COBIT® 5 implementation lifecycle

• List the key factors for successful implementation of COBIT® framework

• Explain the purposes of the three interrelated components of the COBIT® 5 implementation lifecycle

In the next section, we will focus on governance of enterprise IT.

Governance of Enterprise IT

Information and IT are increasingly becoming a part of every aspect of the business. The need today is to drive more value from IT investments and manage an increasing number of IT-related risks.

Increasing regulation and legislation is also raising awareness of the importance of good IT governance. This has led organizations to invest in implementing good Governance of Enterprise IT or GEIT.

In the next section, we will focus on the COBIT 5 Implementation guide.

COBIT® 5 Implementation Guide

COBIT 5 Implementation is available as a separate publication and reference guide that provide a good practice approach for implementing Governance of Enterprise IT based on a continual improvement lifecycle that must be tailored to suit an enterprise’s specific needs.

The Information Systems Audit and Control Association or ISACA developed the COBIT® 5 framework to help enterprises implement sound governance enablers.

• Implementing good GEIT is facilitated by an effective governance framework, providing best practices and standards to underpin COBIT® 5. However, frameworks, best practices, and standards are useful only when adopted and adapted effectively.

• The COBIT 5 Implementation guide provides guidance on how to overcome the challenges and address the issues in implementing GEIT.

• The COBIT 5 Implementation guide was released at the same time as the COBIT 5 Framework and COBIT 5 Enabling Processes.

In the next section, we will discuss the challenges in implementing a governance framework.

Challenges in Implementation

The following are the questions that organizations need to ask themselves during the implementation of any governance framework:

• What are the drivers?

• Where are we now?

• Where do we want to be?

• What needs to be done?

• How do we get there?

• Did we get there?

• How do we keep the momentum going?

In the next section, we will focus on the COBIT® 5 implementation phases.

COBIT® 5 Implementation Phases

There are seven phases of the COBIT® 5 implementation lifecycle. The following image shows the phases of COBIT® 5 implementation.

The three interrelated components of the lifecycle model are as follows:

• Programme management represented by the outer ring

• Change enablement indicated by the middle ring and

• Continual improvement lifecycle that is represented by the inner ring

In the next section, we will focus on the enterprise internal and external factors applying to change management.

Enterprise Internal and External Factors

The internal factors that apply to change management include the following:

• Ethics and culture

• Mission, vision, and values

• Business plans and strategic intentions

• Operating model

• Management style

• Risk appetite and

• Capabilities and available resources

The external factors that apply to change management include the following:

• Applicable laws, regulations, and policies

• Governance policies and practices and

• Industry practices

In the next section, we will discuss the key factors for successful implementation of the COBIT® framework.

Key Factors for Successful Implementation

The factors that contribute to successful implementation of the COBIT® framework are:

• The top management providing direction and mandate for the initiative as well as showing ongoing commitment;

• All parties supporting the governance and management processes to understand the business and IT objectives;

• Effective communication and enablement of the necessary changes;

• Tailoring COBIT® and other supporting good practices and standards to fit the unique context of the enterprise and

• Focusing on quick wins and prioritizing improvements that are the most beneficial and easiest to implement.

In the next section, we will focus on the interrelated components of the COBIT® 5 implementation lifecycle.

Three Interrelated Lifecycle Components

The purposes of the three interrelated components of the implementation lifecycle are as follows:

• Programme management (outer ring): Its purpose is to manage the programme from initiation to execution and review.

• Change enablement (middle ring): Its purpose is to address the behavioral and cultural aspects.

• Continual improvement lifecycle (inner ring): Its purpose is to ensure that this is not a one-off project but an engagement that is repeated to make sure that improvements and value additions take place continually.

In the next section, we will further discuss the interrelated lifecycle components.

Three Interrelated Lifecycle Components (contd.)

The table below shows the programme management step for seven phases of the lifecycle, the change enabler for each step and the continual improvement lifecycle component associated with each change enabler.

Please note that the change enabler steps mentioned here are directly associated with the COBIT® 5 enablers covered in the previous lesson.

Summary

Let us summarise what we have learned in this lesson:

• The seven phases of the COBIT® 5 implementation lifecycle are:

- ‘what are the drivers?’,

- ‘where are we now?’,

- ‘where do we want to be?’,

- ‘what needs to be done?’,

- ‘how do we get there?’,

- ‘did we get there?’ and

- ‘how do we keep the momentum going?’.

• Some of the key factors that help in successful implementation of the COBIT® framework are the top-level management providing direction and mandate for the initiative, effective communication, and prioritization of improvements that are the easiest to implement.

• The three interrelated components of the COBIT® 5 implementation lifecycle are programme management, change enablement, and continual improvement. In the next lesson, we will focus on the phases of the COBIT® 5 implementation lifecycle.

The next chapter talks about COBIT® 5 Implementation Phases.