|
COBiT Basics > Navigation overview > IT Domain |
Domains are groupings of IT processes. There are four broad domains: planning and organisation, acquisition and implementation, delivery and support, and monitoring.
Definitions for the four domains identified for the high-level classification are:
Planning and Organisation -
This domain covers strategy and tactics, and concerns the identification of
the way IT can best contribute to the achievement of the business objectives.
Furthermore, the realisation of the strategic vision needs to be planned, communicated
and managed for different perspectives. Finally, a proper organisation as well
as technological infrastructure must be put in place.
Acquisition and Implementation -
To realise the IT strategy, IT solutions need to be identified, developed or
acquired, as well as implemented and integrated into the business process. In
addition, changes in and maintenance of existing systems are covered by this
domain to make sure that the life cycle is continued for these systems.
Delivery and Support -
This domain is concerned with the actual delivery of required services, which
range from traditional operations over security and continuity aspects to training.
In order to deliver services, the necessary support processes must be set up.
This domain includes the actual processing of data by application systems, often
classified under application controls.
Monitoring -
All IT processes need to be regularly assessed over time for their quality and
compliance with control requirements. This domain thus addresses management's
oversight of the organisation's control process and independent assurance provided
by internal and external audit or obtained from alternative sources.
It should be noted that the IT processes within a Domain can be applied at
different levels within an organisation. For example, some of these processes
will be applied at the enterprise level, others at the information services
function level, others at the business process owner level, etc.