IT Governance, Risk, and Compliance

Dec 24 2010   3:11PM GMT

Governing IT: Policy Formulation and Enforcement – Part III



Posted by: Robert Davis
Decision Making, Goals, Internal Control Systems, ITG, Management, Objectives, Organizing, Planning, Policy Formation

Developing and implementing IT Governance design effectiveness and efficiency can be a multidirectional, interactive, iterative, and adaptive process. Normally, oversight committees and executive management utilize high-level governance documents to provide general control direction. Whereby, lower-level management converts high-level governance documents into detail-level IT Governance documents assisting in ensuring control objective achievement.

From a systems perspective, the design, deployment, maintenance, and disposal of policies is a control objective development life cycle item. Operationally, this control objective development life cycle item is an available management tool utilized to obtain desired business results; while preventing, detecting, and/or conditionally correcting errors, mistakes, omissions, irregularities and illegal acts.

View Part I of the Governing IT: Policy Formulation and Enforcement series here

Comment on this Post

Leave a comment: