COBIT 2019
Build, Acquire and Implement – COBIT 2019

COBIT 2019 BAI03.07: BAI03.07 Prepare for solution testing

A test plan and the environments it requires are put in place to test solution components on their own and together, including business processes and the services, applications and infrastructure that support them: a combined test plan and practices, proportionate to the enterprise's environment and technology plans, allow suitable test and simulation environments to be created to confirm the solution works as designed and meets requirements; the test environment covers the whole solution, resembles real operating conditions as far as possible (processes, users, security, transaction volumes and interfaces) and safeguards test data; test procedures that follow the plan allow evaluation under realistic conditions and include whether controls are adequate, drawing on enterprise quality standards and defined risk; and test procedures, cases, controls and parameters are recorded and kept for reuse in later testing.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 3 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27001:2022 · 3 controls

  • 8.29 Security testing in development and acceptance
  • 8.31 Separation of development, test and production environments
  • 8.33 Test information

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Build, Acquire and Implement – COBIT 2019

Query this from an agent

The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.