Sarbanes-Oxley IT Compliance Using Open Source Tools, 2nd Edition

Appendix A COBIT Control Objectives

PLANNING & ORGANIZATION

1. Define a Strategic IT Plan

1.1. IT as Part of the Organization’s Long- and Short-Range Plan

1.2. IT Long-Range Plan

1.3. IT Long-Range Planning—Approach and Structure

1.4. IT Long-Range Plan Changes

1.5. Short-Range Planning for the IT Function

1.6. Communication of IT Plans

1.7. Monitoring and Evaluating of IT Plans

1.8. Assessment of Existing Systems

2. Define the Information Architecture

2.1. Information Architecture Model

2.2. Corporate Data Dictionary and Data Syntax Rules

2.3. Data Classification Scheme

2.4. Security Levels

3. Determine Technological Direction

3.1. Technological Infrastructure Planning

3.2. Monitor Future Trends and Regulations

3.3. Technological Infrastructure ...