<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/1.5.1-alpha" -->
<rss version="0.92">
<channel>
	<title>IT GOVERNANCE COURSES FOR CIO</title>
	<link>http://itgovernance.blogsome.com</link>
	<description>A short couse and information about IT Governance and Information Security. Some cases study given for Banking Information System.</description>
	<lastBuildDate>Mon, 03 Mar 2008 09:56:19 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>

	<item>
		<title>IT Audit Course: How to make a report of IS Auditing</title>
		<description><![CDATA[	BASIC AUDIT REPORT 
The contents of most audit reports follow a similar pattern and include: 
	
Background, scope, and objectives 
	Summary of major findings 
	Audit opinion 
	Detailed findings and recommendations 
	Acknowledgments of satisfactory performance 
	Detailed technical appendices 

	A cover is almost always desirable because it sets a professional tone from the start. It should include the [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/03/it-audit-course-how-to-make-a-report-of-is-auditing/</link>
	</item>
	<item>
		<title>IT audit course: Processing of  IS Audit Evidence</title>
		<description><![CDATA[	IS AUDIT EVIDENCE PROCEDURES 
As has been stated, the auditor gathers evidence by following the audit program, which is a set of detailed steps that the auditor will follow in order to gain the appropriate evidence and, for the Information Systems (IS) Auditor, may well include the use of computerized techniques, although this is not [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/03/it-audit-course-processing-of-is-audit-evidence/</link>
	</item>
	<item>
		<title>IT Audit Course: Managing IS Auditing</title>
		<description><![CDATA[	&nbsp;
ORGANIZATION OF THE FUNCTION
	The dividing line between what is a computer audit function and what is a general audit function can vary significantly between audit groups. Some groups include what in other audit departments would be a computer audit function in the general audit responsibilities. There are three different views on computer audit as a [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/03/it-audit-course-managing-is-auditing/</link>
	</item>
	<item>
		<title>IT Audit course: IS Audit Plan</title>
		<description><![CDATA[	STRUCTURE OF THE PLAN 
	The structure of the planning will, in general, follow the structure of the audit process. It will therefore include the preliminary survey of operations, the internal control description and analysis, the expanded tests control systems, the development of findings and recommendations, the report production, following up, and audit evaluation. 
	Preliminary Survey [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/03/it-audit-course-is-audit-plan/</link>
	</item>
	<item>
		<title>IT audit course: The concept of IT Auditing</title>
		<description><![CDATA[	COMPUTER RISKS AND EXPOSURES 
	&ldquo;Control&rdquo; comprises all the elements of an organization (including its resources, systems, processes, culture, structure and tasks) that, taken together, support people in the achievement of the organization&rsquo;s objectives. Control is &ldquo;effective&rdquo; to the extent that it provides reasonable assurance that the organization will achieve its objectives reliably. Leadership involves making [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/03/it-audit-course-the-concept-of-it-auditing/</link>
	</item>
	<item>
		<title>IT audit course: Information System Auditing</title>
		<description><![CDATA[	INFORMATION SYSTEMS AUDITING 
	Effective management of information and related Information Technology (IT) has become of critical importance to the survival and long-term success of any organization. This has arisen because of the increasing dependence on information and the associated systems that deliver this information, together with the costs and size of future use of IT. [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/03/it-audit-course-information-system-auditing/</link>
	</item>
	<item>
		<title>IT Governance course : COBIT&#8217;s Management Guidelines</title>
		<description><![CDATA[	COBIT&#8217;s  Management Guidelines
	COBIT&#8217;s Management Guidelines consist of maturity models,  critical success factors (CSFs), key goal indicators (KGIs) and key performance  indicators (KPIs). This structure delivers a significantly improved framework  responding to management&#8217;s need for control and measurability of IT by providing  management with tools to assess and measure their organisation&#8217;s [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/it-governance-course-cobits-management-guidelines/</link>
	</item>
	<item>
		<title>IT Governance course : COBIT</title>
		<description><![CDATA[	
Introducing COBIT
	Control Objectives for Information and related  Technology (COBIT) was initially published by the Information Systems Audit  and Control Foundation&trade; (ISACF&trade; in 1996, and was followed by a second edition in 1998.  The third edition, which incorporates all-new material on IT Governance and  Management Guidelines, was issued by the IT Governance [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/63/</link>
	</item>
	<item>
		<title>IT Governance course: Balanced Scorecard</title>
		<description><![CDATA[	Balanced  Scorecard (BSC)

In the 1990s, Kaplan and Norton developed the Balanced Scorecard.  Their idea is that the evaluation of a company should not be restricted to the  traditional financial performance measures but should be supplemented with  measures concerning customer satisfaction, internal processes, and the ability  to innovate. Results achieved within [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/it-governance-course-balanced-scorecard/</link>
	</item>
	<item>
		<title>IT Governance course : Corporate Contribution Scorecard</title>
		<description><![CDATA[	
	The Corporate contribution perspective evaluates the  performance of the IT organization from the viewpoint of executive management,  the Board of Directors and the shareholders, and provides answers to the key  questions of these stakeholders concerning IT Governance. The key  issues  are business/ IT alignment, value delivery, cost management, risk management [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/it-governance-course-corporate-contribution-scorecard/</link>
	</item>
	<item>
		<title>IT Governance course: It Balanced Scorecard Concepts</title>
		<description><![CDATA[	
	In figure below, a  generic IT Balanced Scorecard is shown (Van Grembergen &amp; Van Bruggen, 1998).  The User Orientation perspective represents the user  evaluation of IT. The Operational Excellence perspective  represents the IT processes employed to develop and deliver the applications.  The Future Orientation perspective represents the human  and [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/60/</link>
	</item>
	<item>
		<title>IT Governance course: Conducting a Strategic Alignment Maturity Assessment</title>
		<description><![CDATA[	

	An essential part of the assessment process is recognizing  that it must be done with a team including both business and IT executives. The  convergence on a consensus of the maturity levels and the discussions that ensue  are extremely valuable in understanding the problems and opportunities that need  to be addressed [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/it-governance-course-conducting-a-strategic-alignment-maturity-assessment/</link>
	</item>
	<item>
		<title>IT Governance course: The Six Strategic Alignment Maturity Criteria</title>
		<description><![CDATA[	


This section describes each of the six criteria that are  evaluated in deriving the level of strategic alignment maturity. Examples taken  from actual assessment summaries illustrate the kinds of insights that can be  identified.&nbsp;
	Most organizations today are at a Level 2 with some attributes of  Level 3. This is similar to [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/it-governance-course-the-six-strategic-alignment-maturity-criteria/</link>
	</item>
	<item>
		<title>IT Governance course: ESA and IT Governance 1</title>
		<description><![CDATA[	ESA and IT Governance
	In order to assert better control over IT, align it with  business objectives, and keep its potential benefits and risks in balance,  corporations in recent years have paid considerable attention to the issue of IT  governance. Also spurring this renewed attention are  financial regulations, such as Sarbanes-Oxley, which [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/it-governance-course-esa-and-it-governance-1/</link>
	</item>
	<item>
		<title>IT Governance Course: ESA and IT Governance 2</title>
		<description><![CDATA[	Who owns enterprise services? Who makes a decision about creating new  services?

So far in this chapter, we have discussed only two models of  governance: centralized and decentralized. A decentralized model ultimately  works against standardization, and since enterprise services are built on  standards to ensure interoperability, a decentralized model cannot be  [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/56/</link>
	</item>
	<item>
		<title>IT governance course : ESA and IT Governance</title>
		<description><![CDATA[	ESA and IT Governance
	In order to assert better control over IT, align it with  business objectives, and keep its potential benefits and risks in balance,  corporations in recent years have paid considerable attention to the issue of IT  governance. Also spurring this renewed attention are  financial regulations, such as Sarbanes-Oxley, which [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/03/02/it-governance-course-esa-and-it-governance/</link>
	</item>
	<item>
		<title>Disaster Recovery Planning</title>
		<description><![CDATA[	Disaster  Recovery Planning
	I don&rsquo;t think anyone can question the importance of a  working, tested, reality-based Disaster Recovery Plan (DRP). A disaster recovery  plan is a comprehensive statement of consistent actions to be taken before,  during, and after a disruptive event that causes a significant loss of  information systems resources. Disaster [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/02/24/disaster-recovery-planning/</link>
	</item>
	<item>
		<title>Business Continuity Planning</title>
		<description><![CDATA[	


	
Business  Continuity Planning
	Simply put, business continuity plans are created to prevent  interruptions to normal business activity. They are designed to protect critical  business processes from natural or man-made failures or disasters and the loss  of capital resulting from the unavailability of normal business processes.  Business continuity planning is a strategy [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/02/24/53/</link>
	</item>
	<item>
		<title>Information Security management: Security Awareness</title>
		<description><![CDATA[	Security  Awareness
	Although this section is our last for this chapter, it is  not the least important. Security awareness is often an overlooked element of  security management, because most of a security practitioner&rsquo;s time is spent on  controls, intrusion detection, risk assessment, and proactively or reactively  administering security.
	It should not be [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/02/24/information-security-management-security-awareness/</link>
	</item>
	<item>
		<title>Information Security management:  Security Policy Implementation</title>
		<description><![CDATA[	Security  Policy Implementation
	Security policies are the foundation of a sound security  implementation. Often, organizations will implement technical security solutions  without first creating this foundation of policies, standards, guidelines, and  procedures, thus unintentionally creating unfocused and ineffective security  controls.
	We discuss the following questions in this section:
	

What are policies, standards, guidelines, and [...]]]></description>
		<link>http://itgovernance.blogsome.com/2008/02/24/information-security-management-security-policy-implementation/</link>
	</item>
</channel>
</rss>
