IT Risk Management Capabilities
Policies and Standards
Policies and standards may seem like boring, administrative functions but they are the backbone to your entire program. Your program operates based on the policies, procedures, and standards you have outlined for all facets of your workforce.
Members of your IT department should follow standards when it comes to change management, configurations, new builds, and implementations. You give them the expectations upfront and when the Internal Audit or anyone else comes to check on them, they will have had the answers to the test ahead of time. As mentioned in the design sections, policies, procedures, and standards are usually derived from legal or regulatory requirements, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access