Governance and Internal Controls for Cutting Edge IT

Karen Worstell

Mar 2013 · IT Governance Ltd

About this ebook

IT security risks are constantly changing, so how do we stay ahead?

To remain competitive we rely on being early adopters of new technologies -- but there are inherent risks. As we implement these technologies, how do we manage the risks without hindering the progress of the business?

In Governance and Internal Controls for Cutting Edge IT, Karen Worstell explains strategies and techniques to guide IT managers as they implement cutting edge solutions for their business needs. Based on practical experience and real-life models, she covers key principles and processes for the introduction of new technologies and examines how to establish an appropriate standard of security and control, particularly in the context of the COBIT 5 framework and affiliated standards.

This book will enable you to:

• Optimize your resources by making the most of the potential benefits, and being aware of the potential risks, of your IT provision.
• Improve your stakeholder relationships by enhancing your service management and delivery through the application of appropriate standards.
• Apply security and control methods that are suitable for your business.
• Maximize the opportunities that are presented by compliance legislation and regulations.
• Manage your data storage, data recovery and data migration, particularly in the context of the Cloud
• Ensure business continuity in the face of an incident, and implement strategies to cover the risk of business interruption when using the Cloud.

Learn how to minimize the risk and maximize the returns from new technologies.

About the author

Worstell Karen : Karen Worstell has worked in information security and risk management for more than 25 years, in a range of business sectors. She is currently the Managing Principal of W Risk Group LLC, a professional services practice that enables organizations to manage risk and address myriad standards. Karen has held leadership roles on a number of advisory boards, and is a respected writer on information security. Karen Worstell has worked in information security and risk management for more than 25 years, in a range of business sectors. She is currently the Managing Principal of W Risk Group LLC, a professional services practice that enables organizations to manage risk and address myriad standards. Karen has held leadership roles on a number of advisory boards, and is a respected writer on information security.