AnIntroductiontoCOIT

(http://www.joetheitgu.com/2014/09/09/anintroduction-to-coit/)
POSTDYJOTHITGUY(HTTP://WWW.JOTHITGUY.COM/AUTHOR/JO-TH-IT-GUY/)ONSPTMR9,2014

COIT,formerlknownasControlOjectivesforInformationandRelatedTechnolog,isausiness
frameworkforthegovernanceandmanagementofenterpriseIT.
ItwascreatedISACA,aninternationalprofessionalassociationfocusedonITgovernance
formerlknownastheInformationSstemsAuditandControlAssociation.ISACAdescriesitself
as:

anonpro t,gloalmemershipassociationforITandinformationsstemsprofessionals.

othISACAandCOIThaveevolvedovertheears
Infact,themovefromothISACAandCOITasacronmstonamesintheirownrightistestament
tothis.WiththeISACAnamechangere ectingitsroadermemershipconstituencratherthanits
earlcomputersstemauditingorigins.
COIThasseenanumerofiterationssinceitslaunchin1996,asshowninthefollowingISACA
overview:

Source(http://www.isaca.org/COIT/Documents/A-COIT-5-Overview.pdf)
Thelatestversion,COIT5launchedin2012,isdescriedISACAasaninternationall
recognizedusinessFrameworkfortheGovernanceandManagementofnterpriseITthat:

uildsandexpandsonCOIT4.1integratingothermajorframeworks,standardsand
resources,includingISACAsValITandRiskIT,ITIL(theITservicemanagementestpractice
frameworkformerlknownastheITInfrastructureLirar)andrelatedstandardsfromthe
InternationalOrganizationforStandardization(ISO).
ISACAalsokindlcreatedaCOIT5versusCOIT4.1comparisondocument
(http://www.isaca.org/COIT/Pages/default.aspx)(thedownloadissituatedattheottomofthe
page)somethingthatwaspromisedforITIL2011utneverappearedwhichoutlineswhathas
changedetweenversions.

TheprinciplesofCOIT5
TheseareproalestshowntheuseofanotherISACAgraphicagaintakenfroma
downloadaleCOITpresentation(http://www.isaca.org/COIT/Documents/A-COIT-5Overview.pdf).


WithISACAdescriingtheene tsofCOITashelpingenterprisesto
(http://www.isaca.org/coit/pages/default.aspx):

Maintainhigh-qualitinformationtosupportusinessdecisions
Achievestrategicgoalsandrealizeusinessene tsthroughthee ectiveandinnovativeuseof
IT
Achieveoperationalexcellencethroughreliale,e cientapplicationoftechnolog
MaintainIT-relatedriskatanacceptalelevel
OptimizethecostofITservicesandtechnolog
Supportcompliancewithrelevantlaws,regulations,contractualagreementsandpolicies
ThusCOITisnowvermuchamulti-headedeast.

TheresaCOITforthat
Therearenumerous avorsofCOIT5fordi erentcorporateaudiencesandneeds.Soeond
governanceitprovidesfocusedguidanceonareassuchassecurit,assurance,andrisk.And
practicalookssuchas:
ControlsandAssuranceintheCloud:UsingCOIT5
SecuringMoileDevicesUsingCOIT5forInformationSecurit
TransformingCersecurit:UsingCOIT5
Con gurationManagementUsingCOIT5
OrVendorManagement:UsingCOIT5whichprovidespracticaladviceforavarietof
stakeholdersinvolvedinthevendor-managementprocess,fromtheoardandC-levelexecutives
tothelegaldepartmentandIT.Itoutlines:
Lifecclestagesandstakeholders
Goodpracticestomanagethreatsandrisk
Howtomanageacloudserviceprovider

Howtomanageacloudserviceprovider
Practicalservicelevelagreement(SLA)templates,checklistsandexamples(availalefor
downloadinanonlinetoolkit)
Acasestudoutliningtheconsequencesofine ectivevendormanagement
Ahigh-levelmappingofCOIT5andITILV3forvendormanagement.

COITversusITIL?
Itsacommonquestion,utonethatresultsinananswerthequestionerdoesntnecessaril
expect.
RatherthanchoosingITILorCOIT,manwillrecommendITILandCOITgiventhattheare
complementarratherthancompeting.WithCOITaframeworkofpolicies,processes,
procedures,andmetricsthatcanhelpgivegovernance-relateddirectiontoITservicemanagement
operationsandtheassociatedITILprocesses.Importantl,COITcanhelpguideanIT
organizationinwhatshouldecoveredinITandITservicemanagementprocessesand
procedures(andcontrols),whichisastepeondITIL.

RenownedindustrluminariesRongland(theITSkeptic)andJamesFinisterareothadvocates
ofthepractical,howtofocusofCOIToverITIL.

AccessingCOIT
NotonlisCOITinformationavailaletodownloadinPDF-form
(http://www.isaca.org/COIT/Pages/default.aspx)asoftheSeptemer82014thereisnowan
onlineversion(https://coitonline.isaca.org/)too(registrationrequired).
Where,toquoteISACA,userscannow:
PersonalizethenewGoals&RACIPlannerfortheirenterpriseorclients.
QuicklviewtimelcontentfromISACAandexternalsourcescoveringtopissues.
asilsearch, lterandexportCOIT5pulications.
Commentandaskquestions.

SocheckCOITout.ManpeoplewilltellouthatwhileCOITcanprovideouwiththe
whsandthewhats,ITILwillprovideouwiththehows.
ImageCredit(https://www. ickr.com/photos/spidermandragon5/2922128673/in/photolist-5sdF3R8h3NM8-94MFC4-5XmZg9-5ZLpHR-4X9rx-7N1Rf-6UkJ7-7jgFd-6r8z7G-71fASV-4qXzQqY4Q-7AZW7G-8HxT9-ajJgcn-nJaA8-jhX6Gq-96iD-6t2NM1-6qRd7-7AW8u4-9K4rcxo9tqx-5vrKgh-8sFNji-qi3cH-4ptAN6-6t2P6-74WHAm-4WG1M5-5QHTQc-7AWdK-7pXFg6ohU2ef-7rn9ik-hmzv-8aaG-53Zde-r6nG-hM1mm-ecnXg-7AZVwN-w3rR-ozVVq-6rWZun8akA-6t2sPu-ohUiAK-kizc)

16

36

 estPracticeFrameworks(http://www.joetheitgu.com/categor/est-practice-frameworks/) COIT(http://www.joetheitgu.com/tag/coit/)
1Comment(http://www.joetheitgu.com/2014/09/09/an-introduction-to-coit/#disqus_thread)

1Comment
Recommend

joetheitguy

Share

Login

SortbyBest

Jointhediscussion
StuartRance 10monthsago

NiceoverviewJoe,butIthinkyoumayhaveatypointhefinalline.Ithinkitshouldsay:
...whileCOBITcanprovideyouwiththewhysandthewhats,ITILwillprovideyouwiththehows.

Reply Share

ALSOONJOETHEITGUY

ITSMViews:ClaireAgutterfromITSMZone

ITILIsntEvilBut

1commentayearago

1commentayearago

JoelPomalesBrilliant.Greatread.

mf2112TheproblemIhavewithITIListhatit

treatsmeinITasaservanttothebusiness.Ithink
thatisaterriblerelationship.Servant.

AnInterviewwiththeUKs#1ITILHater

6ReasonsWhyYoureGoingWrongWithITIL

1comment7monthsago

2comments8monthsago

GarethDaineReallyenjoyedreadingthisarticle

JoeTheITGuyThanksforsharing,Ritchie!

(whilstlisteningtoThePhoenixProjectoniTunes)
andSteve'sperspectiveand

Subscribe

AddDisqustoyoursiteAddDisqusAdd

Privacy

Scrollup

OlderPost(http://www.joetheitgu.com/2014/08/22/itsm-views-from-a-vendor-with-arvindparthian-from-manageengine/)
NewerPost(http://www.joetheitgu.com/2014/09/30/help-ssaid-is-the-onl-itsm-toolvendor-at-interop/)
Joe The IT Guy is NOT skydiving his way to Fusion in Washington DC

Morevideos(https://www.outue.com/plalist?list=PLC6515759F5D25)

vents
TheServiceDesk&ITSupportShow(SITS)2015,
June3-4,2015|London,UK
(https://www.ssaid.com/resources/itsm-events/sits15)

FUSION15:RoarintotheMiddleAgesofService
Management,Novemer1-4,2015|NewOrleans
(https://www.ssaid.com/resources/itsmevents/fusion15)

(https://www.faceook.com/SsAidIT?pnref=lhc)|(https://twitter.com/joe_the_it_gu)

Search

MYMOSTPOPULARLOGPOSTS
5TipsforTakingITSMOutsideIT(http://www.joetheitgu.com/2015/03/20/5-tips-for-taking-itsm-outside-it/)
TakingtheNOOutofKnowledgeManagement(http://www.joetheitgu.com/2015/01/28/taking-the-no-out-ofknowledge-management/)
12TipsForGettingStartedWithIncidentManagementPart1(http://www.joetheitgu.com/2014/12/05/12-tips-forgetting-started-with-incident-management-part-1/)
12TipsForGettingStartedWithIncidentManagementPart2(http://www.joetheitgu.com/2014/12/11/12-tips-forgetting-started-with-incident-management-part-2/)
WhatMakesa(Super)ServiceDeskManager?(http://www.joetheitgu.com/2014/08/05/what-makes-a-super-servicedesk-manager/)
TheGreatestverCodetoIncidentCategorization(http://www.joetheitgu.com/2014/04/17/the-greatest-ever-codeto-incident-categorization/)

estPractice

Change

Frameworks

Management

GeneralIT
(http://www.joetheitgu.com/categor/general-

(http://www.joetheitgu.com/categor/est(http://www.joetheitgu.com/categor/changeit/)
practice-frameworks/)

management/)

(http://www.joetheitgu.com/categor/general-it/) (http://www.joetheitgu.com/categor/general
it/)

Industr
vents

Incident

(http://www.joetheitgu.com/categor/industr-

Management

events/)
(http://www.joetheitgu.com/categor/incidentmanagement/)

Interviews

ITasset

(http://www.joetheitgu.com/categor/interviews/)
management(ITAM)

ITservice

Knowledge

management(ITSM)

Management

(http://www.joetheitgu.com/categor/it(http://www.joetheitgu.com/categor/it(http://www.joetheitgu.com/categor/knowledgeasset-management-

service-management-

itam/)

itsm/)

management/)

KPIsand

Prolem

Service

Metrics

Management

Desk

(http://www.joetheitgu.com/categor/kpis(http://www.joetheitgu.com/categor/prolem(http://www.joetheitgu.com/categor/serviceand-metrics/)

management/)

desk/)

Soincaseouhadn'tworkeditoutet,I'mJoe!
Hellothere.I'manativeNewYorkerandIloveeverthingconnectedtoITservicemanagement(ITSM).
I'mapassionateloggerandtwitteraddict,andI'malsotheresidentITguatSsAidTechnologies.
That'sprettmuchmeinanutshell.

Tweet

Like

18