“Performance measurement is a control activity.” Measurement techniques are the means for achieving effective performance monitoring. Manually monitoring and evaluating the current state of implemented policies may take a variety forms, including: IT control self-assessments, IT quality assurance assessments and IT audits. These manually-based control systems assist in ensuring, or assuring, policy compliance within the entity. However, what should not differ from control system to control system utilized to assess compliance is top-level managements’ violation adminstration of adopted IT policies.
“View Part I of the Governing IT: Policy Formulation and Enforcement series here“