This article provides an overview and summary of the COBIT 5 process Manage Configuration, which is part of the Management – build (Build, Acquire, Implement) domain.

Define and maintain descriptions and relationships between key resources and capabilities required to deliver IT-enabled services, including collecting configuration information, establishing baselines, verifying and auditing configuration information, and updating the configuration repository. Provide sufficient information about service assets to enable the service to be effectively managed, assess the impact of changes and deal with service incidents. Ensure the configuration repository is accurate, complete and up to date.

The following sub-governance processes are further supported by a list of control activities:

  1. Establish and maintain a configuration model. Establish and maintain a logical model of the services, assets and infrastructure and how to record configuration items (CIs) and the relationships amongst them. Include the CIs considered necessary to manage services effectively and to provide a single reliable description of the assets in a service.
  2. Establish and maintain a configuration repository and baseline. Establish and maintain a configuration management repository and create controlled configuration baselines.
  3. Maintain and control configuration items. Maintain an up-to-date repository of configuration items by populating with changes.
  4. Produce status and configuration reports. Define and produce configuration reports on status changes of configuration items.
  5. Verify and review integrity of the configuration repository. Periodically review the configuration repository and verify completeness and correctness against the desired target.

For more information please contact Morland-Austin at