IT Governance, Risk, and Compliance

Jan 12 2013   5:59PM GMT

eBook excerpt: Assuring Information Security – Part X



Posted by: Robert Davis
Accountability, Acquire and Implement, Adaptive Systems, Asset Management, Assurance Services, Availability Management, COBIT Domains, Control Environment, Control Objectives, Control Objectives for Information and related Technology, Deliver and Support, Due Diligence, Fiduciary Responsibility, Framework, Information Assets Protection, Information Security Governance, Information Security Management, ISG, Key Performance Indicators, Monitor and Evaluate, Performance Measurement, Plan and Organize, Risk Management, Strategic Alignment, Value Delivery

Classically, managers are individuals assigned to and functioning at various responsibility, accountability, and authority levels.  Top-level managers are usually responsible for overall entity direction, accountable to stakeholders, and have the authority to establish measurable and achievable high-level goals ensuring adopted high-level objectives attainment.  Middle-level managers are responsible and accountable for programs or activities coordination.  Simultaneously, these managers are accountable upward regarding entity goals and objectives achievement, and responsible downward as top-level management representatives.  At the lower level management spectrum, managers are generally considered supervisors.  Supervisors are usually responsible for daily operations as well as direct interaction with assigned employees for creating, sustaining, or terminating processes.  Furthermore, supervisors are normally accountable to middle-level management for assigned responsibilities.

Comment on this Post

Leave a comment: