COBIT 5 ImplementationSupplemental Tools and Materials

ISACA
With 95,000 constituents in 160 countries, ISACA (www.isaca.org) is a leading global provider of knowledge,
certifications, community, advocacy and education on information systems (IS) assurance and security, enterprise
governance and management of IT, and IT-related risk and compliance. Founded in 1969, the nonprofit, independent
ISACA hosts international conferences, publishes the ISACA Journal, and develops international IS auditing and
control standards, which help its constituents ensure trust in, and value from, information systems. It also advances
and attests IT skills and knowledge through the globally respected Certified Information Systems Auditor (CISA),
Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT) and
Certified in Risk and Information Systems ControlTM (CRISCTM) designations. ISACA continually updates
COBIT, which helps IT professionals and enterprise leaders fulfil their IT governance and management
responsibilities, particularly in the areas of assurance, security, risk and control, and deliver value to the business.

Disclaimer
ISACA has designed this publication, COBIT 5 ImplementationSupplemental Tools and Materials (the
Work), primarily as an educational resource for governance of enterprise IT (GEIT), assurance, risk and
security professionals. ISACA makes no claim that use of any of the Work will assure a successful outcome.
The Work should not be considered inclusive of all proper information, procedures and tests or exclusive of
other information, procedures and tests that are reasonably directed to obtaining the same results. In
determining the propriety of any specific information, procedure or test, readers should apply their own
professional judgement to the specific GEIT, assurance, risk and security circumstances presented by the
particular systems or information technology environment.

Copyright
Copyright for Supplemental Tools and Materials: See individual documents.

ISACA
3701 Algonquin Road, Suite 1010
Rolling Meadows, IL 60008 USA
Phone: +1.847.253.1545
Fax: +1.847.253.1443
Email: info@isaca.org
Web site: www.isaca.org
Feedback: www.isaca.org/cobit

Participate in the ISACA Knowledge Center: www.isaca.org/knowledge-center

Follow ISACA on Twitter: https://twitter.com/ISACANews
Join the COBIT conversation on Twitter: #COBIT
Join ISACA on LinkedIn: ISACA (Official), http://linkd.in/ISACAOfficial
Like ISACA on Facebook: www.facebook.com/ISACAHQ

COBIT 5 ImplementationSupplemental Tools and Materials (2 Dec. 2013)

ISBN 978-1-60420-238-0

1
 COBIT 5 ImplementationSupplemental Tools and Materials

Table of Contents
COBIT 5 Implementation is supported by a zip file of supplemental tools and materials. The tools are in
Microsoft Office Word, PowerPoint and Excel or Adobe PDF format. The tools in the zip file are
organised as follows.

PowerPoint presentations:
02. COBIT 5 IntroductionThis 44-slide presentation includes nine slides of 03. COBIT 5 Executive
Summary and discusses the first three COBIT 5 publications (COBIT 5, COBIT 5: Enabling
Processes and COBIT 5 Implementation).
03. COBIT 5 Executive SummaryThese nine slides indicate that the COBIT 5 principles allow the
enterprise to build an effective governance and management framework based on a holistic set of
enablers to optimise information and technology investment and use for the benefit of stakeholders.
04. COBIT 5 Compare With 4.1This presentation contains 32 slides describing how COBIT 5 builds on
previous versions of COBIT (and Val IT and Risk IT) so that enterprises can build on what they have
developed using earlier versions.
05. COBT 5 for Information Security IntroductionThis 33-slide presentation introduces the professional
guide for security practitioners
06. COBIT 5 and Information Security SpanishThese 26 slides describe the connection of COBIT 5
with the Business Model for Information Security (BMIS) in Spanish.
07. COBT 5 for Assurance IntroductionThis 17-slide presentation introduces the professional guide for
assurance practitioners
08. COBIT 5 for Risk IntroductionThis 30-slide presentation introduces the professional guide for risk
practitioners
09. COBIT 5 and GRCThis 31-slide presentation explains that the COBIT 5 framework includes the
necessary guidance to support enterprise governance, risk and compliance (GRC) objectives and
supporting activities.
10. IT BSC ExampleThese two slides illustrate the balanced score card (BSC) and its implementation.
11. COBIT 5 Key Audience MessagesThis Word document provides key audience messages to assist
with customising the PowerPoint presentations.

Self-assessment, measurement and diagnostic tools Excel files:

12. Process ActivitiesThe activities in the detailed process descriptions describe the functional purpose of
the processwhat the process is supposed to deliver. This file provides all of the process activities in a
spreadsheet.
13. Management Awareness DiagnosticThis is a list of the COBIT 5 processes.

Related article, further explanation and resource PDFs:

14. Balanced Scorecard Case StudyThe case study Linking the IT Balanced Scorecard to the Business
Objectives at a Major Canadian Financial Group was conducted by the IT Alignment and
Governance (ITAG) Research Institute at the University of Antwerp in 2008.
15. FAQsThis document contains 15 frequently asked questions (FAQs) and answers about COBIT 5.
16. COBIT 5 framework overview (laminate)These 11 figures provide a pictorial overview of the
COBIT 5 framework.
17. COBIT 5: Enabling Processes (laminate)These five figures provide a pictorial overview of the
COBIT 5 process enablers.
18. COBIT 5: Enabling Information (laminate)These six figures provide a pictorial overview of the
COBIT 5 Information enabler.
19. COBIT 5 for Information Security (laminate)These 15 figures provide a pictorial overview of the
publication.

2
 COBIT 5 ImplementationSupplemental Tools and Materials

20. COBIT 5 for Assurance (laminate)These eight figures provide a pictorial overview of the
publication.
21. COBIT 5 for Risk (laminate)These 15 figures provide a pictorial overview of the publication.
22. Where Have All the Control Objectives Gone?This article in the July2011 ISACA Journal
describes the move from the control objectives term to governance and management practices.
23. Overview of ISACA Frameworks and Guidance Integrated Into COBIT 5This describes the
frameworks (COBIT 4.1, Risk IT and Val IT) and guidance (Board Briefing on IT Governance, 2nd
Edition, Business Model for Information Security [BMIS], IT Assurance Framework [ITAF],
Taking Governance Forward [TGF]) integrated into COBIT 5.