IT GOVERNANCE COURSE 2: The Growing Need of IT Governance and IT audit

December 6, 2007

In an annual survey of Information security practices conducting by The Deloitte & Touche at 169 financial institutions found that 98 percent of them are spending more on information security this year than last year, and putting a greater emphasis on IT governance. In a related trend, 81 percent of the financial institutions surveyed said they’ve adopted a formal Information Security Governance framework, up from about 70 percent last year. The vast majority of the remaining respondents said they are in the process of establishing their own to fill their need.

 

Deloitte information security survey was gathering information from CIO from Japan 22 percent and the larger Asia Pacific region, 12 percent from the United States, 23 percent from Latin America, 7 percent from Canada, 31 percent from Europe, the Middle East and Africa, and 5 percent from the former Soviet Republics. The survey also tell us; 38 percent of the organizations surveyed did not measure their security budget on a per capita basis, of those that did, 7 percent said they spend more than US$1,000 per person, 7 percent between $501 an $1,000 per person, 14 percent between $251 and $500, 23 percent between $100 and $250, and 11 percent under $100. This indicated that getting through internal and external audits can be tough wherever you are. They report that the main audit obstacles are networks that still allow excessive access rights; lack of adequate audit logging; and failure to assure access control complies with formal business procedures.

 

According to the 2007 Global Security Survey, the cost for security system spending is up as much as 15 percent over last year at 11 percent of the 169 corporations surveyed, which include banks, and financial instutions from 32 countries. The highest cost were made in IT audit and IT auditor certification costs, logical access control products, infrastructure protection devices and compliance and risk management. The survey also asked the respondents questions about technology use. Questions asking whether organizations are allowed to use wireless technologies, including wireless LANs, infrared networking or mobile devices, due to security reasons. Forty five percent of the respondents said their organizations prohibit use of wireless LANs, 75 percent prohibited infrared networking; and 13 percent prohibited mobile devices, including PDAs and BlackBerries.

 

Those not prohibiting use of wireless sought to offer employees guidelines on secure use, published policies on acceptable business use or did implement wireless technologies.

You need more? here you go…

IT GOVERNANCE COURSE 1: Definition of IT Governance, Still Unclear?

IT GOVERNANCE COURSE 3: The Benefits of IT Governance for Your Corporate

IT GOVERNANCE COURSE 4: Why Corporate Governance Need IT Audit?

IT GOVERNANCE COURSE 5: Who Is Responsible for IT Governance?

IT GOVERNANCE COURSE 6: Best Practices, Why the board need it?

IT GOVERNANCE COURSE 7: IT Governance Steering Committee in Corporate Governance

IT GOVERNANCE COURSE 8: How to Measure the Performance of the corporate Governance?

IT GOVERNANCE COURSE 9 : Information Security Governance

IT GOVERNANCE COURSE 10 : Who Attack Us?

IT GOVERNANCE COURSE 11: The Art of Intrusion and Attacking

IT GOVERNANCE COURSE 12: How to Role, Strategize and Plan the Corporate Governance?

IT GOVERNANCE COURSE 14: Identify the Risk and Manage It

IT GOVERNANCE COURSE 15 : Step by Step to Risk Assessment

IT GOVERNANCE COURSE 16: Management Practices and Controls

IT GOVERNANCE COURSE 17 : Change Management and Improvement Quality Techniques

IT GOVERNANCE COURSE 18 : Understanding Personnel Roles and Responsibilities

Comments »

The URI to TrackBack this entry is: http://itgovernance.blogsome.com/2007/12/06/it-governance-course-2-the-growing-need-of-it-governance-and-it-audit/trackback/

No comments yet.

RSS feed for comments on this post.

Leave a comment

Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>



Anti-spam measure: please retype the above text into the box provided.

Get free blog up and running in minutes with Blogsome | Theme designs available here