• Determine an optimum alternative risk-based solution for
meeting business needs and general information resource
requirements (e.g., whether to develop or acquire a system),
Information resources, as defined in COBIT in the Acquire
and Implement (AI) domain, include people, applications,
technology, facilities and data organized and managed through
a given set of IT "natural" processes. Such processes can easily
be mapped to SDLC and, with some more effort, to rapid
application development (RAD).