Which Cobit Processes Most Relate to SOX 927



  • Hi I’m interested to find out if anyone has experience of which of the COBIT processes relate to SOX.
    Last year we were audited on 12 out of the 34 processes.
    Aquire or Develop application software
    Aquire Technology Infrastructure
    Develop and maintain Policies and Procedures
    Install and Test Application Software and Technology Infrastructure
    Manage Chages
    Define and Manage Service levels
    Manage Third Party Services
    Ensure system security
    Manage the Configuration
    Manage Problems and Invcidents
    Manage Data
    Manage Operations
    Of these 12 processes we had to comply with 30 out of the 60ish Illustrative controls.
    Any feedback on your experiences welcome.


Log in to reply