IT Governance, Risk, and Compliance: July, 2010 archives

July 27, 2010 3:28 PM

Not-for-profit Risk Management – Part VIII

Posted by: Robert Davis

COBIT, Educational Institutions, Enterprise Governance, Entity Governance, Governance Tree, Government Agencies, ICT, IT Architecture, IT Service Management, ITG, ITSM, Performance Measurement, Risk Assessment, Risk Management, Risk Tolerance, Strategic Planning, Value Delivery

Deploying Enterprise Governance bilaterally connected to IT Governance enables management to focus on value creation drivers that move an entity forward and sustain proper as well as adequate controls. ...

July 23, 2010 6:25 PM

Not-for-profit Risk Management – Part VII

Posted by: Robert Davis

COBIT, Educational Institutions, Enterprise Governance, Entity Governance, Governance Tree, Government Agencies, ICT, IT Architecture, IT Service Management, ITG, ITSM, Performance Measurement, Risk Assessment, Risk Management, Risk Tolerance, Strategic Planning, Value Delivery

Utilizing a maturity model can aid management in identifying risk issues. Procedurally, a maturity model provides a standard means to document and evaluate the state of controls. Collectively, the entity’s not-for-profit managers can contribute to...

July 20, 2010 5:10 PM

Not-for-profit Risk Management – Part VI

Posted by: Robert Davis

COBIT, Educational Institutions, Enterprise Governance, Entity Governance, Governance Tree, Government Agencies, ICT, IT Architecture, IT Service Management, ITG, ITSM, Performance Measurement, Risk Assessment, Risk Management, Strategic Planning, Value Delivery

An IT risk assessment consists of risk identification and risk analysis. For not-for-profit entities, risk identification includes examining external factors such as technological...

July 16, 2010 5:16 PM

Not-for-profit Risk Management – Part V

Posted by: Robert Davis

COBIT, Educational Institutions, Enterprise Governance, Entity Governance, Governance Tree, Government Agencies, ICT, IT Architecture, IT Service Management, ITG, ITSM, Performance Measurement, Risk Assessment, Risk Management, Strategic Planning, Value Delivery

Adequate risk management provides processes whereby the entity methodically addresses risks impacting the IT architecture with the goal of achieving sustained benefit from each IT configuration and across the

July 13, 2010 5:25 PM

Not-for-profit Risk Management – Part IV

Posted by: Robert Davis

COBIT, Educational Institutions, Enterprise Governance, Entity Governance, Governance Tree, Government Agencies, ICT, IT Architecture, IT Service Management, ITG, ITSM, Performance Measurement, Risk Assessment, Risk Management, Strategic Planning, Value Delivery

Management should monitor and evaluate the entity’s control system by reviewing the results generated through cyclical control activities and special evaluations. Cyclical control activities occur at regular intervals, yet they can vary in ambit. Cyclical control activities...

July 9, 2010 5:28 PM

Not-for-profit Risk Management – Part III

Posted by: Robert Davis

COBIT, Educational Institutions, Enterprise Governance, Entity Governance, Governance Tree, Government Agencies, ICT, IT Architecture, IT Service Management, ITG, ITSM, Performance Measurement, Risk Assessment, Risk Management, Strategic Planning, Value Delivery

To adequately govern not-for-profit IT, risk management must be addressed at multiple levels; including entity, project, and service layers.

July 6, 2010 6:10 PM

Not-for-profit Risk Management – Part II

Posted by: Robert Davis

COBIT, Educational Institutions, Enterprise Governance, Entity Governance, Governance Tree, Government Agencies, ICT, IT Architecture, IT Service Management, ITG, ITSM, Performance Measurement, Risk Assessment, Risk Management, Strategic Planning, Strategic Risk, Strategy, Value Delivery

By definition, strategy is the skill in managing or planning an approach to achieving an end. It is crucial to accomplishing an entity’s long range plans. Strategy is concerned with controlling the entity’s destiny and achieving stated goals; while planning is a formalized procedure to produce...

July 1, 2010 6:00 PM

Not-for-profit Risk Management – Part I

Posted by: Robert Davis

COBIT, Educational Institutions, Enterprise Governance, Entity Governance, Governance Tree, Government Agencies, ICT, IT Architecture, IT Service Management, ITG, ITSM, Performance Measurement, Risk Assessment, Risk Management, Strategic Planning, Value Delivery

Crucial to achieving appropriate not-for-profit performance and conformance equilibrium is consideration of the entity’s strategic mission as well as risk management system. To empower...