Transcript for Presentation

This document is a transcript of a presentation on IT management and the COBIT framework. It discusses the core values of COBIT, organizational levels, and key performance indicators. The presentation also highlights the importance of information and data management, as well as the challenges and benefits of implementing IT governance.

TRANSCRIPT FOR PRESENTATION
Question 1:
Slide 3:
Fundamentally, IT organization gives a structure to altering IT procedure to the business
framework. By following a formal framework, affiliations can convey quantifiable results toward
achieving their methods and destinations. A formal program furthermore thinks about
accomplices' interests, similarly as the necessities of staff and the systems they seek after. In the
ground breaking strategy, IT organization is a major bit of when all is said in done undertaking
organization. IT organization and GRC are basically something fundamentally the same as.
"While GRC is the parent program, what makes sense of which structure is used is every now
and again the situation of the CISO and the degree of the security program. For example, when a
CISO reports to the CIO, the degree of GRC is every now and again IT focused. Exactly when
security reports outside of IT, GRC can cover more business perils past IT." Affiliations today
are at risk to various rules regulating the security of mystery information, money related
obligation, data support and disaster recovery, among others. They're in like manner under strain
from financial specialists, accomplices and customers. To ensure they meet inside and outside
necessities, various affiliations realize a formal IT organization program that gives an
arrangement of best practices and controls. COBIT is a methodology that goes for interfacing
business goals to IT targets – naming goals and commitments to both business and IT pioneers. It
gives the advantages for production, screen, and improve its execution, while diminishing costs,
set up and keep up security benchmarks, and give structure and oversight to general IT frames
inside the association.
The COBIT structure depends on these five core values:
● Addressing Stakeholder Needs (esteem creation for big business partners)
● Covering the Enterprise End-to-end (inclusion of every corporate procedure and
capacities that identify with data stream and innovations)
● Applying a Single Integrated Framework with a solitary arrangement of benchmarks to
be utilized over the business
● Empowering a Holistic Approach among seven classes of empowering influences as
characterized by COBIT 5
● Isolating Governance From Management
Slide 4: Organisationally, COBIT takes a shot at three hierarchical levels: on the degree of the
leading body of chiefs and official/c-level administration, on the IT and business the executives
duty, and at stake level of administration, security, and learning specialists. The executives
model contains four components: A development model, basic achievement factors (CSFs), key
objective markers (KGIs), and key execution pointers (KPIs). The development model spreads
six development levels of IT administration.
Slide 5: The CSFs are the board centered execution rules towards IT procedure control including,
among others, the efficiency and adequacy situated usage of the board rehearses, the joining and
interoperability of IT forms, and the combination of IT administration exercises into authority
conduct. The further center lies with hierarchical objectives, key activities, technology-enhanced
business, and asset/capacity accessibility. The KGIs measure business dependent objective
accomplishment by IT procedures and IT frameworks, for example, time-to-advertise shortening,

expanding client reach and fulfillment, the revealing of new administration conveyance channels,
business process incorporation and institutionalization and degree of profitability increment for
IT endeavors. The KPIs are estimations of IT process execution towards key objectives, such as
scorecards execution, staff efficiency and resolve, partner fulfilment, information also, data
accessibility and the mix of IT administration all through the association.
Slide 6: Arranging and association incorporates drafting an IS system connected (through the
data strategy)to the business methodology correspondence of the technique to the whole
association, arrangement of the IT framework and association (counting staffing), and procedure
chance appraisal. Obtaining and execution incorporates distinguishing, gaining/creating and
actualizing arrangements, coordinating them into the business procedures and later keeping up
and supporting them. Conveyance and backing incorporate administration, procedure and
activities conveyance, security and congruity (reinforcement) arrangement, preparing,
information handling and execution and limit the executives. Observing and assessment
incorporate procedure and administration evaluation, reviewing and benchmarking.
Question 2:
Slide 9: The pith of IT the executives thinks about data and information as the most significant
assets for an association and intends to process and oversee it such that will make it important.
Data is an asset that should be overseen from the information is created and until it is pulverized.
It additionally should be ensured and should be gotten to just by certain approved individuals. It
is an asset that can without much of a stretch be blurred in the event that it isn't overseen and
individuals are permitted to cause changes at their will. A noteworthy preferred position
increased after COBIT as it settle seven key hazard zones found inside an association. Board part
basic leadership chance The capability of the board individuals is differed and not a factor that is
commonly viewed as when depicting the wellbeing and development of an organization. This
undermines the suitability and adequacy of the choices taken by the board individuals. COBIT
oversees information and data to give a reasonable understanding into the organization
procedures. Additionally, outer information which is subject to market and client information is
likewise handled which gives keen signals to the executives choices.
Slide 10: As associations develop they wander into various offices and fields that make the
authoritative chain of importance and operational procedure excessively confounded (De Haes et
al. 2016). Likewise, correspondence channels are additionally impeded as an individual from one
division can't reach to an individual of another office and is ignorant regarding their jobs and
obligations. Data assumes a significant job in rearranging work and correspondence forms. In
this manner enabling the administration to realize how individuals are associated and how
divisions have been sorted out. It additionally should be ensured and should be gotten to just by
certain approved individuals. It is an asset that can without much of a stretch be obfuscated in the
event that it isn't overseen and individuals are permitted to make changes at their will (Pereira et
al. 2017).
Question 3:
Slide 12: Few dangers and territories are present which should be upgraded so that IS
Governance can be streamlined. The IT division is collected into a group be that as it may, there
is an absence of correspondence inside the group. The jobs and duties are additionally vague

inside most IT groups. They are overseen through a casual errand division which turns into an
issue in complex undertakings (García-Llana et al. 2018).
Absence of responsibility among one of the best difficulties concerning IT administration. It is
fundamental that the general population dealing with the undertakings are dependable and
complete them inside the stipulated time. In the event that even one of them is slacking, at that
point the total procedure might be improved. It is prescribed that an itemized calendar or graph is
made where every day assignments are enrolled. This should be pursued with customary
observing so the errands are finished one by one and inside time.
The administration procedure is liked to incorporate the total association. Nonetheless, this might
be excessively extraordinary or too complex for the accessible assets or workforce.
Subsequently, just explicit offices are incorporated. It is critical to call attention to the divisions
and have the option to recognize their operational procedures from each other.
Slide 13:
Another understanding issue—working through the results and exercises characterized in the
structure and distinguishing approaches to make them work for a specific association. While
adopting the adaptable and down to business strategy of "receive and adjust," one likewise needs
to take care not to stray excessively far from the system's base necessities. Understanding—and
after that choosing the level to which one can receive/adjust the system—is a genuine test. One
should guarantee results and exercises bode well for the association. Be that as it may, then
again, one should maintain a strategic distance from totally revamping a procedure definition. To
do as such, as I would like to think, decreases the estimation of adjusting and estimating the
association's capacity against a perceived system. In the event that one do make changes when
adjusting the system, ensure they depend on educated exchange and are closed down at the
fitting level. This guarantees that one can legitimize the choice down the track whenever tested,
either by own senior supervisory group or by the examiners. Translating the significance of L1 to
L5 from the perspective of an IT group utilizing COBIT 5 to drive improved administration
forms, instead of from an examiner's perspective is an issue that frequently emerges. The view is
that one may have to overlook the SEI CMMI rating scale on the off chance that one has been
utilizing it already. CMMI doesn't line up with or guide to the ISO/IEC 15504 procedure ability
properties or levels, and it could get confounding if the two scales were utilized together. As it
occurs in a situation, the company had invested impressive energy and exertion illuminating and
imparting the CMMI scale to the officials. In this manner, plainly the company expected to
painstakingly deal with the progress to the new scale since it would be indispensable that evident
varieties were not confounded as a decrease inability, but instead as an alternate method for
evaluating and estimating something very similar. We note that accomplishing Level 1 in
ISO/IEC 15504 is a noteworthy accomplishment. A considerable lot of noticed long haul targets
are Level 2 as the company accept this outperforms the needs in many procedure execution
zones. Moving to Level 3 is a noteworthy hop. The translation is that in ISOIEC 15504, a Level
3 procedure must be characterized and oversaw at the undertaking level in the association. It is
then utilized inside useful territories dependent on unmistakably reported undertaking rules.
These endorse its utilization and how it can and can't be adjusted. This implies if a procedure is
just reported inside a business zone or practical gathering, it can't score higher than L2.
All things considered, they have recognized a few competitor L3-and-higher procedures in the
organization. For instance, Risk Management and the Financial Management procedures are
characterized over the entire organization and after that received/adjusted inside every specialty

unit, while continually consenting to the approaches and procedures characterized by the Risk
and Financial capacities.
Question 4:
Slide 15: As indicated by an article in Forbes, 80 percent of endeavors as of now have some type
of AI — alike AI or profound learning — underway today. What's more, 30 percent are wanting
to extend their AI speculations throughout the following three years. Organizations can utilize AI
to educate advertising choices, oversee client connections, increment operational efficiencies
thus considerably more. Organizations will keep on investigating openings and analysis with AI
to improve the business system and activities in the coming year.
It is relied upon to see organizations keep on expanding utilization of online applications. What's
more, organizations with IT displays that are to a great extent or even completely dependent on
the cloud are likely working with a wide range of merchants. This can decentralize IT support,
making it progressively hard to guarantee congruity, security and effectiveness. To address this
issue, organizations should either enlist a solid IT professional(s) in-house or work with an MSP
to adequately deal with these numerous seller connections and contracts.
Chatbots are equipped for working in regions, for example, preparing, installments, and
showcasing. Nonetheless, on the off chance that we are taking a gander at income, Chatbot
administrations have most of the piece of the overall industry. As Grand View research appears,
around 45% of end clients favor them as the essential method of correspondence for inquiries
with respect to client administration. In only a couple of years, an ever increasing number of
organizations will embrace the innovation. In the event that such a significant number of
associations are as of now mindful of the utilization of Chatbots, they're presently beginning to
feel the strain to incorporate the most recent innovation so as to improve their business tasks.