Read more
Informationen zum Autor JAMES J. DELUCCIA IV, CIA, CISA, CISSP, enables organizations to leverage information, technology, and control environments to create competitive advantage and optimize business performance. A recognized expert on risk management, security, and compliance, he provides assurance and advisory services to companies worldwide. DeLuccia, an architect and contributor for international standards and frameworks, provides regular contributions to the PCI and compliance body of knowledge. He holds dual bachelor degrees in information systems and risk management, and an MBA in finance. Klappentext Praise for IT Compliance and Controls"James DeLuccia outlines a comprehensive, integrated strategy for achieving regulatory and legislative compliance. This approach is vastly superior, both in scalability and in sustainability, to the siloed compliance strategies that are often seen."-Dr. Richard Reiner, founder, Assurent Secure Technologies"Deluccia's book is a great primer and must-read for executives who deal with risk on a day-to-day basis. It masterfully combines the tactical nuts and bolts with the breadth of strategy that all executives must understand in dealing with mitigating risk within the walls of Information Technology in today's global economy. This book offers a structured architectural approach, a 'blueprint in effect,' for new and seasoned executives and business professionals alike to understand the world of compliance - from the perspective of what the problems are, where they come from, and how to position your company to deal with them today and into the future."-Salil J. Kulkarni, Chief Operating and Information Officer, IVOX Corporation, and former Chief Information Officer, John H. Harland CompanyThroughout IT Compliance and Controls, managers and directors charged with supporting environments will discover a refined list of business best practice controls that are explicitly written to ensure they meet the regulations in today's environment, including:* The opportunities and challenges of operating in a global environment* How technology enables the world market* Importance of IT controls* Reality and risks to IT controls being effective* Enterprise risk analysis* Access and authorization* Building a system of IT compliance and controlsThis meticulously detailed reference includes materials supported by matrices that map controls to specific regulations and checklists, helping you assess the controls in your own organization.Reach the highest levels of control and ROI with the best practices found in IT Compliance and Controls. Zusammenfassung IT Compliance and Controls offers a structured architectural approach, a 'blueprint in effect,' for new and seasoned executives and business professionals alike to understand the world of compliance?from the perspective of what the problems are, where they come from, and how to position your company to deal with them today and into the future. Inhaltsverzeichnis Preface ix Acknowledgments xiii Part One: Coming of Age Chapter 1 Operating in an Interconnected Universe 3 Chapter 2 How Technology Enables the World Market 19 Chapter 3 Importance of IT Controls 29 Part Two: Influence and Effects Chapter 4 Death of Siloed IT Strategy 37 Chapter 5 A Regulated Environment 45 Chapter 6 The World is Your Oyster of Resources and Guidance 61 Chapter 7 Reality and Risks to IT Controls Being Effective 71 Part Three: Implementation Chapter 8 Enterprise Risk Analysis 83 Chapter 9 Principle 1: Technology Strategy Orchestration 113 Chapter 10 Principle 2: Life Cycle Management 139 Chapter 11 Principle 3: Access and Authorization 167 Chapter 12 Principle 4: Sustain Operations 187 Chapter 13 Principle 5: Security and Assurance 201 Part Four: Looking Forward...
