Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

CCS Standard Manager COBIT template

Created: 09 Jan 2013 | 8 comments
Atif's picture

Hi Guys,

I am working on a client requirement with CCS Standard Manager to check compliance against COBIT standard. I could not find predefined COBIT template under Standards > Predefined.

Can someone please tell me if COBIT comes in predefined standards or where to get it and import it into Standard Manager.

Discussion Filed Under:

Comments 8 CommentsJump to latest comment

Matt Plourde's picture

CCS v11? There aren't any.

CCS v10.5.x has them (I'm attaching), but they aren't anything you should necessarily use.

Enjoy! :)

AttachmentSize
CobiT from CCS 10.5.zip 343.31 KB
Atif's picture

Thanks Matt for the response. Please check the screenshot below. These are the predefined standards I am seeing on CCS console.

Matt Plourde's picture

What's in the "Applications" folder?

Atif's picture

Under Applications are specific checks for different Applications.

Matt Plourde's picture

you can import what I attached into CCS... they work... but I'd do some heavy editing to them for use "in the real world" if I were you :)

cmccoy2's picture

If you really wanted to use the COBIT standard, the suggested method now is to make sure your checks are mapped to the appropriate control statements using the controls studio.  Make sure that you have enabled the Cobit Framework and then setup a Dashboard that will look at your results on how they stack up with the Cobit Framework.   Currently there are a couple of Dashboards that you can use as reference such as PCI Mandate or SOX Mandate Dashboards.   Hopefully these will be enough for you to determine how using the controls studio works.

Atif's picture

Thanks Matt and cmccoy2,

Appreciate your feedback. I will explore the possibility of customizing the predefined standard.

Definitely going to try Control Studio for mapping controls aspect.

cmccoy2's picture

If you are going to use the Controls studio and you have copied checks from the predefined standards, then you will want to use the "Clone" mappings option in the Controls Studio.  This will restore the mappings of the control statements to the copied checks.   This only works if you are copying from the same instance of CCS since all of the control mappings are based on GUIDs in the database.   If you have a QA\Dev CCS instance and export\import the standards, then the clone mappings doesn't work.  This may save you some time with mappings.