Implementing COBIT based Process Assessment Model for Evaluating IT Controls

New generations of governance models referring to either IT or Internal Control – like COBIT [1] and COSO [2] are extended with business perspective willing to gain top management’s ear. But the practice shows, this opening solely is not enough to reach a breakthrough, because models became more complicated than it could be applied without some difficulties. Very frequently exposed, that the best catalysts of improvement programs are the more and more mandatory rules coming into force. Sarbanes-Oxley Act for US SEC registrants and their affiliates (all over the world), the Basel II framework and the proposed modification of the Company Law in the EU require not only the implementation of risk management and internal control systems, but the periodic disclosure of effectiveness conclusions performed by the executive management.