S-10-48 Cobi

T The S-10-48 part of COBIT is referred to as a domain which is focused on “Manage Security”. This domain consists of five control objectives that focus on the management of security risks and the alignment of security policies, procedures and standards with the organisation’s objectives. The five control objectives contained within the S-10-48 domain are: Manage Risk; Configure and Manage Security Services; Automate Security Services; Implement and Manage Access Rights; and Monitor Activities and Components. Each of the five objectives has associated control practices, metrics and tools that should be used to guide and measure the effectiveness of the security management process. It is important to note that the S-10-48 domain should be integrated into the wider IT governance and management processes as defined by the ITIL or CobiT frameworks. This is done to ensure that the security management process is properly aligned with the organisation’s overall strategy and objectives.