A practical introduction to the complex world of IT Governance frameworks and standards for board executives and IT professionals. This book will help you understand how to manage those frameworks in line with ISO 38500 with the help of the Calder-Moir model.
The modern organisation is increasingly working within the context of corporate governance. The subject dictates their day-to-day and strategic activities, especially corporate information asset risk management and investment, and the ICT infrastructure within which those information assets are collected, manipulated, stored and deployed.
But what is corporate governance, and why is it important to the IT professional? Why is IT governance important to the company director, and what do directors of companies - both quoted and unquoted - need to know?
The book also explains how to integrate each standard and framework using The Calder-Moir Framework which was developed specifically to help organisations manage and govern their IT operations more effectively, and to coordinate the sometimes wide range of overlapping and competing frameworks and standards.
It also specifically supports implementation of ISO/IEC 38500, the international standard for best practice IT governance.
Board executives and IT professionals can learn to maximise their use of the numerous IT management and IT governance frameworks and standards - particularly ISO/IEC 38500 - to best corporate and commercial advantage.
Within a 'super framework', or 'meta -framework', you can integrate each of these standards and frameworks whilst making sure that each can deliver what it was designed to do. Developing an overarching framework will enable your organisation to design IT governance to meet your own needs.
Alan Calder, the founder and executive chairman of IT Governance Ltd, is an internationally acknowledged cyber security expert, and a leading author on information security and IT governance issues.
He co-wrote the definitive compliance guide IT Governance: An International Guide to Data Security and ISO 27001/ISO 27002, which is the basis for the Open University’s postgraduate course on information security, and has been involved in the development of a wide range of information security management training courses that have been accredited by the International Board for IT Governance Qualifications (IBITGQ).
Alan has consulted on data security for numerous clients in the UK and abroad, and is a regular media commentator and speaker.