A new framework for bridging the gap between IT Service Management and IT Governance from a security perspective.
Eduardo M. da Cruz, Les Labuschagne
Abstract
Eduardo M. da Cruz, Les Labuschagne
Abstract
With COBIT and ITIL at the forefront of IT governance and IT service management, respectively, there is a need to establish if ITIL Security Management complies with COBIT DS5. This paper investigates the possible compliance and any related issues by comparing the requirements of COBIT DS5 against the measures of ITIL Security Management. Results indicate that ITIL Security Management is unable to fully comply with COBIT DS5. An attempt is made to offer a possible solution through the use of an additional framework that may be integrated into ITIL so that compliance with COBIT DS5 can be achieved.
OpenAlex reports 5 citations for this work. Citation counts describe recorded attention and do not establish research quality.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
With COBIT and ITIL at the forefront of IT governance and IT service management, respectively, there is a need to establish if ITIL Security Management complies with COBIT DS5. This paper investigates the possible compliance and any related issues by comparing the requirements of COBIT DS5 against the measures of ITIL Security Management. Results indicate that ITIL Security Management is unable to fully comply with COBIT DS5. An attempt is made to offer a possible solution through the use of an additional framework that may be integrated into ITIL so that compliance with COBIT DS5 can be achieved.
Key concepts: Information Technology Infrastructure Library, COBIT, ITIL security management, Financial management for IT services, IT service management, IT portfolio management, Process management, Information security management system