Discover how to implement an effective IT governance structure for the long-term success of an extended enterprise IT is no longer an enabler of corporate strategy, it is now the key element of corporate strategy. Governance of the Extended Enterprise explores how some of the world's most successful enterprises have integrated information technology with business strategies, culture, and ethics to optimize information value, attain business objectives, and capitalize on technologies in highly competitive environments. Providing a process for change and a governance model, Governance of the Extended Enterprise encompasses the latest emerging practices from major information and knowledge businesses, providing a major new knowledge resource for enterprises. It also opens up new avenues of practice in strategy setting, enterprise management, control assessment, and risk management. From sales-force automation to workgroup collaboration, forms processing to knowledge management systems, customer service to technical support, Governance of the Extended Enterprise will help readers improve IT governance in all facets of their organization.

Governance of the Extended Enterprise: Bridging Business and IT Strategies

IT Governance Institute

Computers & Technology

wiley

Aimed at providing specific guidance on how to use COBIT when performing a particular role, this guide focuses on service managers, providing them a better understanding of the need for IT governance and how to apply good practices in their specific roles and responsibilities. It facilitates easier use and adoption of COBIT and ITIL concepts and approaches, and encourages integration of COBIT with ITIL.Included are explanations on how to get started and combine COBIT and ITIL for successful service management. Core guidance is provided in the form of a table showing:   The key activities of a service manager organized by ITIL V3 processes   The corresponding COBIT 4.1 control objectives   The corresponding ISO/IEC 20000 references   Roles and responsibilities for a generic range of role players in the various processesCOBIT User Guide for Service Managers is applicable to any service provider, whether acting as an internal IT function or as a commercial vendor. The guidance is based on good practice and the practical experiences of industry experts. The structure has been based on COBIT s key components of key controls, goals and metrics, roles and responsibility (RACI) charts, and maturity models.

COBIT User Guide for Service Managers

Isaca

Board Briefing for IT Governance, 2nd Edition

Information Systems Audit and Control Association

To achieve effectiveness and sustainability in today s complex, interconnected world, information security must be addressed at the highest levels of the organization, not regarded as a technical specialty relegated to the IT department Organizations today face a global revolution in governance that directly affects their information management practices. Following the high-profile organizational failures of the past decade, legislatures, statutory authorities and regulators have created a complex array of new laws designed to force improvement in organizational governance, security, controls and transparency. Coupled with previous laws in these areas and information retention and privacy, these new laws and regulations, together with significant threats of information system disruptions from hackers, worm, virus perpetrators and terrorists create an unprecedented need for a governance approach to information management. Information Security Governance: Guidance for Boards of Directors and Executive Management, first published in 2002, has been updated to reflect the changes in the environment, and to include many ideas and outcomes of those organizations that embrace good Information Security Governance. This guide covers such issues as:  What is information security governance? Why is information security important? Who should be concerned with information security governance? What should information security governance deliver? What can be done to successfully implement information security governance?

Information Security Governance: Guidance for Boards of Directors and Executive Managment, 2nd Edition

W. Krag Brotby

Certification

This publication provides CIOs, IT managers, and control and assurance professionals with scoping and assessment ideas, approaches and guidance in support of the IT-related Committee of Sponsoring Organizations of the Treadway Commission (COSO) internal control objectives for financial reporting. A streamlined road map is provided to help turn compliance into a competitive challenge. Lessons learned and sustaining ideas are also included. The second edition is updated for recent US Securities and Exchange Commission (SEC) and Public Company Accounting and Oversight Board (PCAOB) guidance related to entity-level controls, a risk-based/top-down approach, application controls and the evaluation of deficiencies, as well as an update to COBIT 4.0 references.

IT Control Objectives for Sarbanes-Oxley, 2nd Edition