230
COBIT 2019 requirements in the library
Seeded and linked to controls you share with ISO 27001 and NIST CSF.
Frameworks
Purplecop GRC · COBIT 2019
COBIT 2019, governed instead of documented
COBIT asks how well IT is governed, not only whether controls exist, and that question is hard to answer from spreadsheets. Purplecop GRC carries COBIT 2019 in its library, rates maturity inside the audit and scores every control in a way you can explain.
The difference
From a governance model on paper to one you can measure
What changes when COBIT runs on Purplecop.
Why Purplecop
What only Purplecop brings to COBIT
Governance measured, not described.
Maturity rated, not guessed
Auditors rate five dimensions on a 1 to 5 scale, from Not Evident to Benchmark, inside the audit itself.
Audit management
A control score anyone can explain
Control effectiveness is six weighted factors, from the audit conclusion to assurance, so anyone can see why a control scored what it did.
Audit management
One control, many frameworks
A control shared across frameworks is created once in the library, not rebuilt for each one. The work you do for COBIT counts toward everything else you hold.
Map once, satisfy many
Findings that cannot quietly age
Corrective actions run through a tracked workflow with 5-Whys and fishbone analysis, ageing buckets and three escalation tiers.
Corrective actions
What you get
Built on one platform, with people who use it
Platform
Purplecop GRC
The whole GRC estate in one product: frameworks, controls, policies, evidence, risk and audit on one control library.
FrameworksControlsAudit managementCorrective actionsRisk register
Services
Practitioners beside the platform
The team that runs your engagement works inside the same system, so the work they do stays with you.
Also on the platform
TPRM
Onboard, assess, score and continuously monitor every vendor in one workflow.
Third-party risk
Asset Intelligence
Asset discovery, network monitoring and the audit log in one module, so every asset’s data lives in one place.
Asset Intelligence
Phishing Simulation
Live phishing campaigns with per-user risk scores, run entirely in-house.
Human layer
LMS
Role-based security awareness training for every employee, tracked to completion.
Human layer
People
A directory of the people in scope for training, policy sign-off and access reviews.
People
RBAC
Role-based access control with granular permissions, on a least-privilege model.
Access control
Questions
What teams ask us about COBIT
Can an organisation be certified against COBIT?
COBIT certifications are for individuals. Organisations use COBIT to govern and assess IT, which Purplecop supports.
How is maturity rated?
Inside the audit, on five dimensions from 1 (Not Evident) to 5 (Benchmark).
Does COBIT work overlap ISO 27001?
Yes. Shared controls are created once and count for both.
How much faster is it?
It scales with how much you integrate: the more connectors you turn on, the more evidence is collected automatically, saving up to 70% of the time you used to spend preparing for each assessment.
See it against your own scope
We will walk the product against your scope and show you what runs on day one and what needs configuring.