The issues, opportunities and challenges of aligning information technology more closely with an organization and effectively governing an organization s Information Technology (IT) investments, resources, major initiatives and superior uninterrupted service is becoming a major concern of the Board and executive management in enterprises on a global basis. An integrated and comprehensive approach to the alignment, planning, execution and governance of IT and its resources has become critical to more effectively align, integrate, invest, measure, deploy, service and sustain the strategic and tactical direction and value proposition of IT in support of organizations. Much has been written and documented about the individual components of IT Governance such as strategic planning, demand (portfolio investment) management, program and project management, IT service management and delivery, strategic sourcing and outsourcing, performance management and metrics, like the balanced scorecard, compliance and others. Much less has been written about a comprehensive and integrated IT/Business Alignment, Planning, Execution and Governance approach. This new title fills that need in the marketplace and gives readers a structured and practical solutions using the best of the best principles available today. The book is divided into nine chapters, which cover the three critical pillars necessary to develop, execute and sustain a robust and effective IT governance environment - leadership and proactive people and change agents, flexible and scalable processes and enabling technology. Each of the chapters also covers one or more of the following action oriented topics: demand management and alignment (the why and what of IT strategic planning, portfolio investment management, decision authority, etc.); execution management (includes the how - Program/Project Management, IT Service Management with IT Infrastructure Library (ITIL) and Strategic Sourcing and outsourcing); performance, risk and contingency management (e.g. includes COBIT, the balanced scorecard and other metrics and controls); and leadership, teams and people skills.

This pocket guide provides an introduction on how to approach the complex subject of IT governance. It describes the drivers for IT governance: why it matters, and the relationships between IT governance, risk management, information risk, project governance and compliance risk.

The issues, opportunities and challenges of aligning information technology more closely with an organization and effectively governing an organization s Information Technology (IT) investments, resources, major initiatives and superior uninterrupted service is becoming a major concern of the Board and executive management in enterprises on a global basis. An integrated and comprehensive approach to the alignment, planning, execution and governance of IT and its resources has become critical to more effectively align, integrate, invest, measure, deploy, service and sustain the strategic and tactical direction and value proposition of IT in support of organizations. Much has been written and documented about the individual components of IT Governance such as strategic planning, demand (portfolio investment) management, program and project management, IT service management and delivery, strategic sourcing and outsourcing, performance management and metrics, like the balanced scorecard, compliance and others. Much less has been written about a comprehensive and integrated IT/Business Alignment, Planning, Execution and Governance approach. This new title fills that need in the marketplace and gives readers a structured and practical solutions using the best of the best principles available today. The book is divided into nine chapters, which cover the three critical pillars necessary to develop, execute and sustain a robust and effective IT governance environment - leadership and proactive people and change agents, flexible and scalable processes and enabling technology. Each of the chapters also covers one or more of the following action oriented topics: demand management and alignment (the why and what of IT strategic planning, portfolio investment management, decision authority, etc.); execution management (includes the how - Program/Project Management, IT Service Management and Delivery with IT Infrastructure Library {ITIL} and Strategic Sourcing and outsourcing); performance, risk and contingency management (e.g. includes COBIT, the balanced scorecard and other metrics and controls); and leadership, teams and people skills. Endorsements 'Selig has brought together his years of practical experience and his academic training to produce a valuable resource on how to successfully manage IT. He uses IT governance as the focal point for executing best practices to create alignment between IT and the business. In today s marketplace, where no organization can compete effectively without alignment, this book can become the executive handbook for IT management' Christine V. Bullen, Senior Lecturer, Howe School of Technology Management, Stevens Institute of Technology 'Dr. Selig has written an extremely comprehensive book on IT Governance. It is so comprehensive that today's IT leader need look at few other sources to ensure that they have nailed what it takes to lead a world-class IT organization. It provides details, yet serves as a easily reference-able road-map for today's busy IT executives it's a great desktop companion!' Stu Werner, Executive Vice President and CIO, Li & Fong, U.S.A. 'Dr. Selig s book on this topic is a great resource for all IT practitioners and brings together every critical aspect relating to IT governance. This book lays out a roadmap to executing within a solid governance model. It looks at all aspects of establishing, marinating, growing and sustaining an IT ecosystem. The combination of case studies and disciplined approaches to building well structured processes, committed leaders and change agents will help the board, executive management and most of all, CIO s and IT professionals think through what has worked, what can work and how to deployIT governance successfully. I very much enjoyed reading the chapters. I think you have a great book and I look forward to reading it when it comes out' Dick LeFave, CIO, Sprint Nextel 'In an era when strong IT governance is an increasingly critical component of visionary business and technology leadership, Dr Selig's book provides a welcome compendium of successful practices. Experienced leaders will find it a valuable reference, while early-career managers will appreciate the clear, actionable framework for developing high-quality, sustainable governance models of their own' Hank Zupnick, CIO, GE Real Estate 'Dr Selig's book is a well thought out and comprehensive reference guide on the successful governance of IT in context of the larger business. It successfully combines practical check lists and governance models with real world insights in an easy to read format.The book is organized into logical sections that make it easy to find topics of relevance. This book will be useful when setting up a new governance model or challenging and improving what is in place today. It is written in a format that allows the reader to stand back from the detail and look a the bigger picture, recognizing that an integrated approach to IT governance is critical to the overall health of a successful business.Dr Selig has captured this complex topic in a way that will prove a valuable reference for all levels of Executives and managers that are involved in IT governance' Nicholas Willcox, Director IT, Unilever Americas 'Dr. Selig s blend of executive IT and senior level business experience in major companies combined with many years of teaching experience and research effort have enabled him to create a unique book that blends many different components and perspectives on IT Governance into a single framework. Written for senior and aspiring IT and business leaders, his book draws upon practical experience, research, and best practices as well as the collective wisdom of the many senior IT leaders he has interacted with in teaching IT Governance. A five star rating!' James R. Shea, Director, Syracuse University, Center for Business Information Technologies 'Dr. Selig has created a veritable IT Governance Encyclopedia for the 21st century IT executive. If something isn t covered here, you probably don t need to know it' Peter Schay, Executive VP, The Advisory Council

This pocket guide is the first result of a project that was started by the Netherlands chapters of ISACA (Information Systems Audit and Control Association), ITSMF and EXIN with the aim of developing a managment instrument that fit standards like ITIL, ISO, security standards and the Balanced Scorecard. It is provided for two purposes. First, it is a quick reference guide for those not acquainted with this field of work. Second, it is a high level introduction to ISACA's standard COBIT that will encourage further study. The guide follows the process structure of COBIT but it differs from COBIT in several ways, adding new information to the structure, from the perspective of IT management.

For many companies, their intellectual property can often be more valuable than their physical assets. Having an effective IT governance strategy in place can protect this intellectual property, reducing the risk of theft and infringement. Data protection, privacy and breach regulations, computer misuse around investigatory powers are part of a complex and often competing range of requirements to which directors must respond. There is increasingly the need for an overarching information security framework that can provide context and coherence to compliance activity worldwide. IT Governance is a key resource for forward-thinking managers and executives at all levels, enabling them to understand how decisions about information technology in the organization should be made and monitored, and, in particular, how information security risks are best dealt with. The development of IT governance - which recognises the convergence between business practice and IT management - makes it essential for managers at all levels, and in organizations of all sizes, to understand how best to deal with information security risk. The new edition has been full updated to take account of the latest regulatory and technological developments, including the creation of the International Board for IT Governance Qualifications. IT Governance also includes new material on key international markets - including the UK and the US, Australia and South Africa.

This pocket guide serves as an introduction to the National Institute of Standards and Technology (NIST) and to its Cybersecurity Framework (CSF). This is a US focused product. Now more than ever, organizations need to have a strong and flexible cybersecurity strategy in place in order to both protect themselves and be able to continue business in the event of a successful attack. The NIST CSF is a framework for organizations to manage and mitigate cybersecurity risk based on existing standards, guidelines, and practices. With this pocket guide you can: Adapt the CSF for organizations of any size to implementEstablish an entirely new cybersecurity program, improve an existing one, or simply provide an opportunity to review your cybersecurity practicesBreak down the CSF and understand how other frameworks, such as ISO 27001 and ISO 22301, can integrate into your cybersecurity framework By implementing the CSF in accordance with their needs, organizations can manage cybersecurity risks in the most cost-effective way possible, maximizing the return on investment in the organization’s security. This pocket guide also aims to help you take a structured, sensible, risk-based approach to cybersecurity.

ITIL® 4 Essentials contains everything you need to know to pass the ITIL 4 Foundation Certificate, plus more. It covers practices and concepts that are not addressed as part of the Foundation syllabus, making it ideal for newly qualified practitioners. This second edition has been updated to align with amendments to the ITIL® 4 Foundation syllabus.

A Manager's Guide to ISO22301: starts with an overview of business continuity, how it relates to IT Disaster Recovery (ITDR) and how ISO22301 differs from its predecessor, BS25999; describes the BCM policy and related policy statement and gives an overview of the BCM process, providing a summary of the sections and main components of ISO22301; discusses business impact analysis (BIA) and risk assessment in the context of business continuity; outlines key areas of BCM including strategy, procedures, testing, evaluation and improvement; examines BCM culture, document management, reporting and certification, and briefly considers BCM standards and codes of practice.

With a quality management system (QMS) based on ISO 9001 – the world’s most established quality framework – you can ensure the quality of the products and services your company provides, thereby enhancing customer satisfaction and increasing profitability. ISO 9001:2015 – A Pocket Guide provides a useful introduction to ISO 9001 and the principles of quality management.

A clear, concise primer on the CMMC (Cybersecurity Maturity Model Certification), this pocket guide: Summarizes the CMMC and proposes useful tips for implementation Discusses why the scheme has been created Covers who it applies to Highlights the requirements for achieving and maintaining compliance