Tailoring COBIT and other supporting good practices and standards to Tit the unique context of the

enterprise is required

Significant incidents related to IT risk, such as data loss or project failure, have been experienced

A focus on quick wins and prioritizing the most beneficial improvements that are #a»»e*l lo implement is needed

Key program roles and responsibilities should be defined and assigned