IT Compliance and Controls: Best Practices for Implementation

Preface ix

Acknowledgments xiii

Part One: Coming of Age

Chapter 1 Operating in an Interconnected Universe 3

Chapter 2 How Technology Enables the World Market 19

Chapter 3 Importance of IT Controls 29

Part Two: Influence and Effects

Chapter 4 Death of Siloed IT Strategy 37

Chapter 5 A Regulated Environment 45

Chapter 6 The World is Your Oyster of Resources and Guidance 61

Chapter 7 Reality and Risks to IT Controls Being Effective 71

Part Three: Implementation

Chapter 8 Enterprise Risk Analysis 83

Chapter 9 Principle 1: Technology Strategy Orchestration 113

Chapter 10 Principle 2: Life Cycle Management 139

Chapter 11 Principle 3: Access and Authorization 167

Chapter 12 Principle 4: Sustain Operations 187

Chapter 13 Principle 5: Security and Assurance 201

Part Four: Looking Forward

Chapter 14 This is Not the End 239

Chapter 15 Building a System of IT Compliance and Controls 249

Supportive Publications 263

List of Acronyms 269

Index 271