IT Governance
IT Governance
What is Security IT Governance?
Security IT governance is the formal framework that an organization implements to ensure all IT investments are supporting business goals. The push for this framework was kickstarted in the 1990’s and early 2000’s due to the enactment of laws including the Gramm-Leach-Bliley Act (GLBA) and the Sarbanes-Oxley Act.
Benefits of IT Governance
By implementing an IT governance framework, organizations can track results and tie investments back to meaningful goals. This allows stakeholders, managers, and staff to have a voice in the processes they follow. IT governance is integral for both small and enterprise organizations.
What Organizations Benefit from IT Governance?
Private and public organizations need to have a set of IT governance rules to ensure all technology investments and functions support your business goals. More specifically, organizations that work within the financial and healthcare industries will need to comply with a set of strict regulations.
IT Governance Policies to Implement
- Information Systems Governance Policies Statement
- Information Technology Steering Team
- Information Security Policy
- Acceptable Use Policy
- Information Access Policy
- Change Management Policy
- Remote Access Policy
- Wireless Access Policy
- Security Awareness Policy
- Information System Risk Management Policy
- Security Incident Response Management Policy
- Information System Log Management Policy
- Security Hardening Policy
- Data Classification Policy
- Data Disposal Policy
- Business Continuity and Disaster Recovery Policy
- Information Systems Governance Policies Appendix
- HIPPA Compliance
- PCI Compliance
