It Compliance and Controls

Best Practices for Implementation
1. Auflage 2008
ISBN: 978-0-470-14501-2
Verlag: Wiley

Buch, Englisch, 288 Seiten, Format (B × H): 160 mm x 236 mm, Gewicht: 517 g

IT Compliance and Controls offers a structured architectural approach, a 'blueprint in effect,' for new and seasoned executives and business professionals alike to understand the world of compliance?from the perspective of what the problems are, where they come from, and how to position your company to deal with them today and into the future.

Autoren/Hrsg.

Deluccia IV, James J

Fachgebiete

• Wirtschaftswissenschaften Betriebswirtschaft Wirtschaftsinformatik, SAP, IT-Management
• Mathematik | Informatik EDV | Informatik Angewandte Informatik Wirtschaftsinformatik

Inhaltsverzeichnis

Preface ix

Acknowledgments xiii

Part One: Coming of Age

Chapter 1 Operating in an Interconnected Universe 3

Chapter 2 How Technology Enables the World Market 19

Chapter 3 Importance of IT Controls 29

Part Two: Influence and Effects

Chapter 4 Death of Siloed IT Strategy 37

Chapter 5 A Regulated Environment 45

Chapter 6 The World is Your Oyster of Resources and Guidance 61

Chapter 7 Reality and Risks to IT Controls Being Effective 71

Part Three: Implementation

Chapter 8 Enterprise Risk Analysis 83

Chapter 9 Principle 1: Technology Strategy Orchestration 113

Chapter 10 Principle 2: Life Cycle Management 139

Chapter 11 Principle 3: Access and Authorization 167

Chapter 12 Principle 4: Sustain Operations 187

Chapter 13 Principle 5: Security and Assurance 201

Part Four: Looking Forward

Chapter 14 This is Not the End 239

Chapter 15 Building a System of IT Compliance and Controls 249

Supportive Publications 263

List of Acronyms 269

Index 271

Über Autor(innen)

JAMES J. DELUCCIA IV, CIA, CISA, CISSP, enables organizations to leverage information, technology, and control environments to create competitive advantage and optimize business performance. A recognized expert on risk management, security, and compliance, he provides assurance and advisory services to companies worldwide. DeLuccia, an architect and contributor for international standards and frameworks, provides regular contributions to the PCI and compliance body of knowledge. He holds dual bachelor degrees in information systems and risk management, and an MBA in finance.