ISACA COBIT® 5 - Glossary (EN) Export

accountable party (RACI)	The individual, group or entity that is ultimately responsible for a subject matter, process or scope

In a RACI chart, answers the question: Who accounts for the success of the task?
accountability of governance	Governance ensures that enterprise objectives are achieved by evaluating stakeholder needs, conditions and options; setting direction through prioritisation and decision making; and monitoring performance, compliance and progress against plans. In most enterprises, governance is the responsibility of the board of directors, under the leadership of the chairperson.
Activity	In COBIT, the main action taken to operate the process. Guidance to achieve management practices for successful governance and management of enterprise
IT. Activities:
- Describe a set of necessary and sufficient action-oriented implementation steps to
achieve a Governance Practice or Management Practice
- Consider the inputs and outputs of the process
- Are based on generally accepted standards and good practices
- Support establishment of clear roles and responsibilities
- Are non-prescriptive and need to be adapted and developed into specific procedures appropriate for the enterprise
alignment	A state where the enablers of governance and management of enterprise IT support the goals and strategies of the enterprise
application architecture	Description of the logical grouping of capabilities that manage the objects necessary to process information and support the enterprise's objectives
architecture board	A group of stakeholders and experts who are accountable for guidance on enterprise architecture related matters and decisions, and for setting architectural policies and standards
authentication	The act of verifying the identity of a user and the user's eligibility to access computerised information

Scope Note: Assurance: Authentication is designed to protect against fraudulent logon activity.
It can also refer to the verification of the correctness of a piece of data.
baseline architecture	The existing description of the fundamental underlying design of the components of the business system before entering a cycle of architecture review and redesign
benefits realisation	One of the objectives of governance. The bringing about of new benefits for the enterprise, the maintenance and extension of existing forms of benefits, and the elimination of those initiatives and assets that are not creating sufficient value.
business continuity	Preventing, mitigating and recovering from disruption. The terms 'business resumption planning', 'disaster recovery planning' and 'contingency planning' also may be used in this context; they focus on recovery aspects of continuity, and for that reason the 'resilience' aspect should also be taken into account.
business goal	The translation of the enterprise's mission from a statement of intention into performance targets and results
Business process control	The translation of the enterprise's mission from a statemenThe policies, procedures, practices and organisational structures designed to provide reasonable assurance that a business process will achieve its objectives of intention into performance targets and results
Chargeback	The redistribution of expenditures to the units within a company that gave rise to them

Scope Note: Chargeback is important because without such a policy, misleading views may be given as to the real profitability of a product or service, as certain key expenditures will be ignored or calculated according to an arbitrary formula.
COBIT	1. COBIT 5: Formerly known as Control Objectives for Information and related Technology (COBIT); now used only as the acronym in its fifth iteration. A complete, internationally accepted framework for governing and managing enterprise information and technology (IT) that supports enterprise executives and management in their definition and achievement of business goals and related IT goals. COBIT describes five principles and seven enablers that support enterprises in the development, implementation, and continuous improvement and monitoring of good IT-related governance and management practices.

Scope Note: Earlier versions of COBIT focused on control objectives related to IT processes, management and control of IT processes and IT governance aspects.

Adoption and use of the COBIT framework are supported by guidance from a growing family of supporting products. (See www.isaca.org/cobit for more information.)

2. COBIT 4.1 and earlier: Formerly known as Control Objectives for Information and related Technology (COBIT). A complete, internationally accepted process framework for IT that supports business and IT executives and management in their definition and achievement of business goals and related IT goals by providing a comprehensive IT governance, management, control and assurance model. COBIT describes IT processes and associated control objectives, management guidelines (activities, accountabilities, responsibilities and performance metrics) and maturity
code of ethics	A document designed to influence individual and organisational behaviour of employees by defining organisational values and the rules to be applied in certain situations. It is adopted to assist those in the enterprise called upon to make decisions understand the difference between 'right' and 'wrong' and to apply this understanding to their decisions.
competence	The ability to perform a specific task, action or function successfully
consulted party (RACI)	Refers to those people whose opinions are sought on an activity (two-way communication)

In a RACI chart, answers the question: Who is providing input?

Key roles that provide input. Note that it is up to the accountable and responsible roles to obtain information from other units or external partners, too; however, inputs from the roles listed are to be considered and, if required, appropriate action has to be taken for escalation, including the information of the process owner and/or the steering committee
context	The overall set of internal and external factors that might influence or determine how an enterprise, entity, process or individual acts Scope Note: Context includes:
- Technology context - Technological factors that affect organization's ability to extract value from data
- Data context - Data accuracy, availability, currency and quality
- Skills and knowledge - General experience, and analytical, technical and business skills
- Organization and cultural context - Political factors, and whether the organisation prefers data to intuition - Strategic context - Strategical objectives of the enterprise
control	The means of managing risk, including policies, procedures, guidelines, practices or organisational structures, which can be of an administrative, technical, management or legal nature. Also used as a synonym for safeguard or countermeasure.
culture	A pattern of behaviours, beliefs, assumptions, attitudes and ways of doing things
driver	External and internal factors that initiate and affect how an enterprise or individuals act or change
enterprise goal	See Business goal
enterprise governance	A set of responsibilities and practices exercised by the board and executive management with the goal of providing strategic direction, ensuring that objectives are achieved, ascertaining that risk is managed appropriately and verifying that the enterprise's resources are used responsibly. It could also mean a governance view focussing on the overall enterprise; the highest-level view of governance to which all others must align.
full economic life cycle	A period of time during which material business benefits are expected to arise from, and/or during which material expenditures (including investments, running and retirement costs) are expected to be incurred by, an investment programme
good practice	A proven activity or process that has been successfully used by multiple enterprises and has been shown to produce reliable results
governance	The framework, principles and policies, structures, processes and practices, information, skills, culture, ethics, and behaviour to set direction and monitor compliance and performance of the enterprise aligned with the overall purpose and defined objectives. Governance defines accountability, responsibility and decision making (among other elements).
governance/management practice	For each COBIT process, the governance and management practices provide a complete set of high-level requirements for effective and practical governance and management of enterprise IT. They are statements of actions from governance bodies and management.
governance enabler	Something (tangible or intangible) that assists in the realization of effective governance
governance framework	A framework is a basic conceptual structure used to solve or address complex issues; an enabler of governance; a set of concepts, assumptions and practices that define how something can be approached or understood, the relationships amongst the entities involved, the roles of those involved, and the boundaries (what is and is not included in the governance system).

Examples: COBIT and COSO's Internal Control—Integrated Framework
governance of enterprise IT	An asset that, like other important business assets, is essential to an enterprise's business. It can exist in many forms: printed or written on paper, stored electronically, transmitted by post or electronically, shown on films, or spoken in conversation.
information	An asset that, like other important business assets, is essential to an enterprise's business. It can exist in many forms: printed or written on paper, stored electronically, transmitted by post or electronically, shown on films, or spoken in conversation.
informed party (RACI)	Refers to those people who are kept up to date on the progress of an activity (one-way communication)

In a RACI chart, answers the question: Who is receiving information?

Roles who are informed of the achievements and/or deliverables of the task. To role in 'accountable', of course, should always receive appropriate information to oversee the task, as do the responsible roles for their area of interest.
inputs and outputs	The process work products/artefacts considered necessary to support operation of the process.

They enable key decisions, provide a record and audit trail of process activities, and enable follow-up in the event of an incident. They are defined at the key management practice level, may include some work products used only within the process and are often essential inputs to other processes. The illustrative COBIT 5 inputs and outputs should not be regarded as an exhaustive list since additional information flows could be defined depending on a particular enterprise's environment and process framework.
investment portfolio	The collection of investments being considered and/or being made
IT application	Electronic functionality that constitutes parts of business processes undertaken by, or with the assistance of, IT
IT goal	A statement describing a desired outcome of enterprise IT in support of enterprise goals. An outcome can be an artefact, a significant change of a state or a significant capability improvement.
IT service	The day-to-day provision to customers of IT infrastructure and applications and support for their use. Examples include service desk, equipment supply and moves, and security authorisations.
management	Entails the judicious use of means (resources, people, processes, practices, etc.) to achieve an identified end. It is a means or instrument by which the governance body achieves a result or objective. Management is responsible for execution within the direction set by the governance body. Management is about planning, building, organising and controlling operational activities to align with the direction set by the governance body, and reporting back on these activities.
model	A way to describe a given set of components and how those components relate to each other to describe the main workings of an object, system, or concept
objective	Statement of a desired outcome
organisational structure	An enabler of governance and of management. Includes the enterprise and its structures, hierarchies and dependencies.

Example: Steering committee
output	See Inputs and outputs
owner	Individual or group that holds or possesses the rights of and the responsibilities for an enterprise, entity or asset, e.g., process owner, system owner
policy	Overall intention and direction as formally expressed by management
principle	An enabler of governance and of management. Comprises the values and fundamental assumptions held by the enterprise, the beliefs that guide and put boundaries around the enterprise's decision making, communication within and outside the enterprise, and stewardship - caring for assets owned by another.

Example: Ethics charter, social responsibility charter
process	Generally, a collection of practices influenced by the enterprise's policies and procedures that takes inputs from a number of sources (including other processes), manipulates the inputs and produces outputs (e.g., products, services)

Scope note: Processes have clear business reasons for existing, accountable owners, clear roles and responsibilities around the execution of the process, and the means to measure performance.
process (capability) attribute	ISO/IEC 15504: A measurable characteristic of process capability applicable to any process
process capability	ISO/IEC 15504: A characterization of the ability of a process to meet current or projected business goals
process goal	A statement describing the desired outcome of a process. An outcome can be an artefact, a significant change of a state or a significant capability improvement of other processes.
programme and project management office (PMO)	The function responsible for supporting programme and project managers, and gathering, assessing and reporting information about the conduct of their programmes and constituent projects
quality	Being fit for purpose (achieving intended value)
RACI chart	Illustrates who is responsible, accountable, consulted and informed within an organisational framework
resource	Any enterprise asset that can help the organisation achieve its objectives
resource optimisation	One of the governance objectives. Involves effective, efficient and responsible use of all resources - human, financial, equipment, facilities, etc.
responsible party (RACI)	Refers to the person who must ensure that activities are completed successfully In a RACI chart, answers the question: Who is getting the task done? Roles taking the main operational stake in fulfilling the activity listed and creating the intended outcome
risk	The combination of the probability of an event and its consequence (ISO/IEC 73)
risk management	One of the governance objectives. Entails recognising risk; assessing the impact and likelihood of that risk; and developing strategies, such as avoiding the risk, reducing the negative effect of the risk and/or transferring the risk, to manage it within the context of the enterprise's risk appetite.
service catalogue	Structured information on all IT services available to customers
services	See IT service
skill	The learned capacity to achieve predetermined results
stakeholder	Anyone who has a responsibility for, an expectation from or some other interest in the enterprise - e.g., shareholders, users, government, suppliers, customers and the public
system of internal control	The policies, standards, plans and procedures, and organisational structures designed to provide reasonable assurance that enterprise objectives will be achieved and undesired events will be prevented or detected and corrected
value creation	The main governance objective of an enterprise, achieved when the three underlying objectives (benefits realisation, risk optimisation and resource optimisation) are all balanced

    Using Quizlet Help Mobile Students Teachers Upgrades

    About Quizlet Company Jobs Privacy Terms Contact

Study Everywhere! © 2015 Quizlet Inc. Follow @quizlet on Twitter.