Teaching Case: Making the Grade: Using COBIT to Study Computer Crime at Bucks County Community College (Pennsylvania)

ISACA, a non-profit, independent association that advocates for professionals involved in information security, assurance, risk management, and governance, recently updated its IT governance framework, Control Objectives for Information and Related Technology (COBIT). COBIT 2019 presents a logical approach to information technology and policy issues. Using a recent real-world computer crime that occurred at a community college, students address breaches of various COBIT components. Students then recommend approaches to minimize the risks and vulnerabilities that expose this school and others. This current case familiarizes students with COBIT's components and the value it provides.