COBIT 2019
Build, Acquire and Implement – COBIT 2019

COBIT 2019 BAI03.05: BAI03.05 Build solutions

Solutions are installed, configured and joined up with business process activities, and control, security, privacy and auditability measures are put in place while hardware and infrastructure software are configured and integrated, so that resources are protected and remain available and intact: business and IT components and information stores are integrated and configured according to detailed specifications and quality requirements, with regard to the part played by users, business stakeholders and process owners in setting up processes; process and operations manuals are finished and revised for any customisation or special conditions; the relevant information control requirements are addressed during integration and configuration, including business controls built into automated application controls so that processing is accurate, complete, timely, authorised and auditable; audit trails are enabled as configuration is done; where warranted, the combined effect of customisations and configurations, including small changes that did not go through formal design, is reassessed at a high level; acquired application software is configured to meet business processing needs; catalogues of products and services are defined for internal and external target groups; and supporting tests, automated where possible, confirm that components work together.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27001:2022 · 1 control

  • 8.25 Secure development life cycle

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Build, Acquire and Implement – COBIT 2019

Query this from an agent

The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.