Parent Framework: COBIT 2019
Domain: Build, Acquire and Implement
Define and maintain descriptions and relationships among key resources and capabilities required to deliver I&T-enabled services. Include collecting
configuration information, establishing baselines, verifying and auditing configuration information, and updating the configuration repository.
Provide sufficient information about service assets to enable the service to be effectively managed. Assess the impact of changes and deal with service incidents.
BAI10.01 Establish and maintain a configuration model.
Establish and maintain a logical model of the services, assets, infrastructure and recording of configuration items (CIs), including the relationships among them. Include the CIs considered necessary to manage services effectively and to provide a single, reliable description of the assets in a service.
BAI10.02 Establish and maintain a configuration repository and baseline.
Establish and maintain a configuration management repository and create controlled configuration baselines.
BAI10.03 Maintain and control configuration items.
Maintain an up-to-date repository of configuration items (CIs) by populating any configuration changes.
BAI10.04 Produce status and configuration reports.
Define and produce configuration reports on status changes of configuration items.
BAI10.05 Verify and review integrity of the configuration repository.
Periodically review the configuration repository and verify completeness and correctness against the desired target.
Configuration management CFMG
The planning, management, control and governance of organisational, project and service assets and artefacts. The identification, classification and specification of configuration items (CIs) and their inter-relationships. Identifying the configuration and version of source code, software, systems, documents and service dependent CIs at distinct points in time. Systematically controlling changes to the configuration and maintaining the integrity and traceability of the configuration throughout the project, system and/or service life cycle. Identifying and documenting the functional and physical characteristics of CIs, controlling changes to those characteristics, recording and reporting change processing and implementation status. Verifying and auditing CIs for data quality and compliance with specified internal and external requirements.
Be the first to leave a review.