Cobit FAQ > How are the new Management Guidelines integrated into the CobiT Framework?

How are the new Management Guidelines integrated into the CobiT Framework?

Starting with the CobiT Framework, the application of international standards and guidelines, and research into best practices led to the development of the Control Objectives. Audit Guidelines were then developed to assess whether these Control Objectives are appropriately implemented. However, management needs a similar application of the Framework to allow self-assessment and choices to be made for control implementation and improvements over its information and related technology.

The Management Guidelines provide the tools to accomplish this. They were developed for each of the 34 high-level control objectives, with a process management and performance measurement perspective. Maturity models, critical success factors, key goal indicators and key performance indicators are provided by the guidelines to support management decision-making processes. The control considerations of the high-level control objectives have been updated to reflect, without mapping one-to-one, the critical success factors of the control objective.

The development of the Management Guidelines took into consideration the need to support the requirements of:

	Enterprise and IT management, with a set of new process management tools, while realising the benefit of utilising an established, authoritative and up-to-date control framework, as represented by CobiT.
	The security and control professional, with a basis for leveraging and evolving existing control oriented processes to provide additional services and value in support of enterprise objectives.

The Management Guidelines assume little knowledge of control frameworks, in general, and CobiT, in particular, by enterprise and IT management. Yet, they <