Governance and Internal Controls for Cutting Edge It

To remain competitive we rely on being early adopters of new technologies - but there are inherent risks. As we implement these technologies, how do we manage the risks without hindering the progress of the business? In Governance and Internal Controls for Cutting Edge IT, Karen Worstell explains strategies and techniques to guide IT managers as they implement cutting edge solutions for their business needs. Based on practical experience and real-life models, she covers key principles and processes for the introduction of new technologies and examines how to establish an appropriate standard of security and control, particularly in the context of the COBIT 5(r) framework and affiliated standards. This book will enable you to apply security and control methods that are suitable for your business, ensure that you make the most of the potential benefits, and are aware of the potential risks of your IT provision. It will show you how the application of appropriate standards can improve stakeholder relationships and enhance your service management and delivery, enabling you to maximize the opportunities that are presented by compliance legislation and regulations. You will learn how to manage your data storage, recovery and migration - particularly in the context of the Cloud, ensure business continuity in the face of an incident, and implement strategies to cover the risk of business interruptio

Karen Worstell has worked in information security and risk management for more than 25 years, in a range of business sectors. She is currently the Managing Principal of W Risk Group LLC, a professional services practice that enables organizations to manage risk and address myriad standards. Karen has held leadership roles on a number of advisory boards, and is a respected writer on information security.

1: Cutting Edge IT; 2: Governance; 3: Legislative and Regulatory Compliance Considerations; 4: Getting the Business Case Right; 5: Service Level Management in the Cloud; 6: Security and Control Approach; 7: Data Management; 8: Business Recovery and Business Continuity; 9: The Future State: A More Secure IT-Enabled Organization