Editorial & Advertiser disclosure

Global Banking & Finance Review® is an online platform offering news, analysis, and opinion on the latest trends, developments, and innovations in the banking and finance industry worldwide. The platform covers a diverse range of topics, including banking, insurance, investment, wealth management, fintech, and regulatory issues. The website publishes news, press releases, opinion and advertorials on various financial organizations, products and services which are commissioned from various Companies, Organizations, PR agencies, Bloggers etc. These commissioned articles are commercial in nature. This is not to be considered as financial advice and should be considered only for information purposes. It does not reflect the views or opinion of our website and is not to be considered an endorsement or a recommendation. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third-party websites, affiliate sales networks, and to our advertising partners websites. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish advertised or sponsored articles or links, you may consider all articles or links hosted on our site as a commercial article placement. We will not be responsible for any loss you may suffer as a result of any omission or inaccuracy on the website.

Home > Technology > ISACA ISSUES 23 NEW AUDIT PROGRAMS ALIGNED WITH COBIT 5

ISACA ISSUES 23 NEW AUDIT PROGRAMS ALIGNED WITH COBIT 5

Published by Gbaf News

Posted on November 24, 2014

3 min read

Last updated: January 22, 2026

Illustration of audit processes aligned with COBIT 5 framework - Global Banking & Finance Review — This image represents the new audit programs issued by ISACA, emphasizing COBIT 5 alignment, which aids IT audit professionals in managing risk and ensuring value creation.

Global IT association ISACA has issued 23 new audit programs aligned with the COBIT 5 framework. The new audit/assurance programs have been developed to help information systems (IS) audit and assurance professionals implement the good practices presented in COBIT 5 for Assurance and incorporate the seven enablers presented in COBIT 5 as part of a consistent assurance approach to assess IT risk.

This group of audit/assurance programs covers two important domains: Align, Plan and Organise (APO) and Build, Acquire and Implement (BAI). These domains include enterprise IT management processes that enable day-to-day delivery of IT services and products to achieve enterprise goals. Audit and assurance professionals can use all or subsets of these generic programs to build specific programs that meet their scope and assurance objectives.

The APO domain covers 13 processes that lay the foundation to manage information assets in a consistent way that ensures value creation and risk optimization. The 13 APO processes are:

Manage the IT Management Framework
Manage Strategy
Manage Enterprise Architecture
Manage Innovation
Manage Portfolio
Manage Budget and Costs
Manage Human Resources
Manage Relationships
Manage Service Agreements
Manage Suppliers
Manage Quality
Manage Risk
Manage Security

The BAI domain covers 10 processes that ensure that projects will be managed in a consistent and efficient way to enable the enterprise to realize value from information assets. The 10 BAI processes are:

Manage Programmes and Projects
Manage Requirements Definition
Manage Solutions Identification and Build
Manage Availability and Capacity
Manage Organisational Change Enablement
Manage Changes
Manage Change Acceptance and Transitioning
Manage Knowledge
Manage Assets
Manage Configuration

An audit program has been developed for each of these processes.

In total, ISACA now has nearly 30 generic audit/assurance programs aligned with COBIT 5. The Evaluate, Direct and Monitor (EDM) domain covers five processes for the governance of enterprise IT, and those five programs were released earlier in the year to help audit professionals assess the effectiveness of the IT governance framework and its alignment with enterprise goals. Programs for the six processes included in the Deliver, Service and Support (DSS) domain will be released in December.

“ISACA’s audit programs are comprehensive and reference all seven COBIT 5 enablers and their dimensions to assess overall process performance,” said Steven Babb, CGEIT, CRISC, international vice president of ISACA and risk, compliance and assurance leader at Vodafone UK and Ireland. “The programs reference the COBIT 5 goals cascade to ensure that detailed objectives of the assurance engagement can be put into the enterprise and IT context.”

The audit programs have been developed and peer reviewed by experienced audit/assurance professionals from around the world. The programs can be downloaded as Microsoft Word™ files to allow customization to fit specific operatingenvironments.

The audit/assurance programs are free for ISACA members and US $45 for nonmembers at www.isaca.org. COBIT 5 is available at www.isaca.org/cobit.