© 2018 ISACA. All rights reserved.

No part of this publication may be used, copied, reproduced, modified,

distributed, displayed, stored in a retrieval system or transmitted in any form by any means (electronic,
mechanical, photocopying, recording or otherwise) without the prior written authorisation of ISACA. Use of
this publication is permitted solely for personal use and must include full attribution of the material’s source.
No other right or permission is granted with respect to this work.
ced, modified,
(electronic,
of ISACA. Use of
material’s source.
 Management Awareness Diagnostic 1-Controlling IT
Risk Who does it?
Importance = How important it is for the organization
on a scale from 1 (not at all) to 5 (very)
Performance = How well it is done from 1 (very well)
to 5 (do not know or badly)
Formality = Existence of a contract, an SLA or a clearly documented
procedure (Yes, No or ?)
Audited = Yes, No or ?
Accountable = Name or ‘do not know’ Who is accountable?

COBIT 2019 Domains and Objectives

Do Not Know
Performance
Importance

Formality
Outside

Audited
Other
IT
Governance
Evaluate, Direct and Monitor
5 3 Y
E
EDM01 Ensured Governance Framework Setting and Maintenance X S Corporación GPF
5 3 Y
E
EDM02 Ensured Benefits Delivery X S Bryan Celi, Coordinador de Franquicias
5 4 Y
E
EDM03 Ensured Risk Optimization X S Area de Control de Gestión
5 4 Y
E José Erazo
EDM04 Ensured Resource Optimization X S Gestión, Supervisión y Control de la Cadena de Abastecimiento
5 4 X Y
E NATALIA JÁCOME
EDM05 Ensured Stakeholder Engagement S Directora de Experiencia al Cliente de Corporación GPF

Management
Align, Plan and Organize
5 3 X Y
E
APO01 Managed I&T Management Framework S Javier Garzón, TI PMO Manager
5 3 X Y
E
APO02 Managed Strategy S Wesly Salazar, Coordinador de Fidelización
5 3 X Y
E
APO03 Managed Enterprise Architecture S Cristian Escobar, Chief Information Officer
4 5 x Y
E
APO04 Managed Innovation S FABRICIO LUZURIAGA
X Y
E
APO05 Managed Portfolio S DIRECCIÓN DE ESTRATÉGIAS GPF (MEMORIA DE SOSTENIBILIDAD 2021)
X Y
E
APO06 Managed Budget and Costs S DIANA SOTO
x Y
E
APO07 Managed Human Resources S GABRIELA GARZON
X Y
E
APO08 Managed Relationships S CRISTINA PINEDA
x Y
E
APO09 Managed Service Agreements S CAMILO PÁEZ
X N
APO10 Managed Vendors O CRISTINA PINEDA
x Y
E
APO11 Managed Quality S GUILLERMO ARAQUE
x x Y
E
APO12 Managed Risk S LISSETE YÁNEZ, DIANA ALVAREZ
APO13 Manage Security x x TATIANA FEIJOÓ
x Y
E
APO14 Managed Data S SAMANTHA ESPINOSA

Build, Acquire and Operate

5 5 x Y
E
S FRANCISCO DAZA, ADMINISTRACIÒN DE APLICACIONES
BAI01 Managed Programs
5 4 X Y
E
S
BAI02 Managed Requirements Definition DAVID ORTIZ VALENCIA , COORDINADOR Y ANALISTA DE PROCESOS
4 4 X Y
E
BAI03 Managed Solutions Identification and Build S DAVID ORTIZ VALENCIA, COORDINADOR DE PROCESOS
5 5 X Y
E
BAI04 Managed Availability and Capacity S DAVID MENCIAS PEREZ, JEFE TÉCNICO Y SOPORTE DE TI
5 4 X Y
E
BAI05 Managed Organizational Change S ANDREA SOSA, COORDINADORA DE GESTIÓN DEL DESEMPEÑO
5 5 X Y
E
BAI06 Managed IT Changes S VERÓNICA GUILLÉN, JEFE DE PROYECTOS Y ADMINISTRADORA DE APLICACIONES
5 3 BAI07 Managed IT Change Acceptance and Transitioning X ? ANDREA SOSA, ESPECIALISTA DE CAPACITACIÓN Y GESTIÓN DEL CAMBIO
3 3 X Y
E
BAI08 Managed Knowledge S JORGE LOZANO, LIDER DE NEGOCIOS
5 5 X Y
E
BAI09 Managed Assets S ELIZABETH ORTIZ, COORDINADORA DE GESTIÓN DE ACTIVOS_x000B_
3 3 BAI10 Managed Configuration X ? FABRICIO TELLO, JEFE DE APLICACIONES & MIDDLEWARE
5 5 X Y Y
E E
BAI11 Managed Projects S S VERÓNICA JARAMILLO, GERENTE DE PROYECTOS Y PROCESOS

Deliver, Service and Support

x Y
E
DSS01 Managed Operations S Miguel Angel Celedon Presidente ejecutivo
x Y
E
DSS02 Managed Service Requests and Incidents S Verónica Guilen Ingeniera en Sistemas y Computación

Copyright 2007 IT Governance Institute. All rights reserved.

 Management Awareness Diagnostic 1-Controlling IT

x Y
E
DSS03 Managed Problems S Chiristian Escobar Hormazabal CIO Chief Information officer
x Y
E
DSS04 Managed Continuity S Fabricio Tello Jefe de Aplicaciones & Middleware en Corporación GPF
x Y
E
DSS05 Managed Security Services S Francisco Yepez Administrador de seguridad de sistemas
x Y
E
DSS06 Managed Business Process Controls S Barbara Lagos Analista de productividad y control financiero
Monitor, Evaluate and Assess
x Y
E
MEA01 Managed Performance and Conformance Monitoring S David Alban Jefe de CRM
x Y
E
MEA02 Managed System of Internal Control S Ana Quiroz Jefa de auditoria interna
x Y
E
MEA03 Managed Compliance with External Requirements S Paul Reyes Magister en Derecho Procesal
x Y
E
MEA04 Managed Assurance S Fabrian Idrovo Gerente de Retail

Copyright 2007 IT Governance Institute. All rights reserved.