COBIT 4.1 (by IT Governance Institute, 2007, 5.2 meg pdf here)
COBIT 4.0 (by IT Governance Institute, 2005, 2.6 meg pdf here)

We will using the Protiviti Knowledge Base as a library reference. Click here to activate your account. The required confirmation number will be provided in class.

• PO1 Define a Strategic IT Plan
• PO2 Define the Information Architecture
• PO3 Determine Technological Direction
• PO4 Define the IT Processes, Organization and Relationships
• PO5 Manage the IT Investment
• PO6 Communicate Management Aims and Direction
• PO7 Manage IT Human Resources
• PO8 Manage Quality
• PO9 Assess and Manage IT Risks
• P10 Manage Projects

• AI1 Identify Automated Solutions
• AI2 Acquire and Maintain Application Software
• AI3 Acquire and Maintain Application Software
• AI4 Enable Operation and Use
• AI5 Procure IT Resources
• AI6 Manage Changes
• AI7 Install and Accredit Solutions and Changes

• DS1 Define and Manage Service Levels
• DS2 Manage Third-party Services
• DS3 Manage Performance and Capacity
• DS4 Ensure Continuous Service
• DS5 Ensure Systems Security
• DS6 Identify and Allocate Costs
• DS7 Educate and Train Users
• DS8 Manage Service Desk and Incidents
• DS9 Manage the Configuration
• DS10 Manage Problems
• DS11 Manage Data
• DS12 Manage the Physical Environment
• DS13 Manage Operations

• ME1 Monitor and Evaluate IT Performance
• ME2 Monitor and Evaluate Internal Control
• ME3 Ensure Compliance With External Requirements
• ME4 Provide IT Governance

1. Plan and Organize (PO)
2. Acquire and Implement (AI)
3. Delivery and Support(DS)
4. Monitor and Evaluate (ME)

1. Generic Contols PC.n;
2. (b) Application Controls AC.n;
3. and specific COBIT controls in the PO; AI; DS and ME sections

 SQL and Back-end Considerations
  Security
  Backup & Recovery
OSI 7 Layer Model
TCP/IP
Ethernet
Firewall ABC's
  XBRL
An XBRL summary
XBRL.ORG http://www.xbrl.org/Home/
XBRL 2.1
Presentation Taxonomy US GAAP - Commercial and Industrial
Short Example
Microsoft Example

• COBIT Baseline Security Summary
  (This is a short summary of COBIT Baseline Security)
• Fraud
  Fraud Schemes and Scenarios *
  Entity-Level Fraud Risk Assessment Process - Sample *
  Common Frauds: By Business Process *
  Entity Level Controls -- Fraud Questionnaire *
  Reading Fraud's warning signs *
  
• Social Engineering
  Social Engineering Fundamentals
  Social Engineering Combat Tactics
  Proactive Defense to Social Engineering
  
• Security Awareness
  Security Awareness Toolbox
  (The Information Warfare Site)