Bagaimana IT Automation bisa membantu Anda mencapai IT Governance & Compliance ?
One of the biggest challenges organizations face when comes to IT governance risk and compliance is the fact that it is difficult to understand the real and ongoing risks organizations faces. Keeping abreast of every change and nuance of each new or modified regulation can be exhausting, whether your organization is responsible to meet one or several compliance initiatives. This challenge is made even more complicated when IT processes are handled manually, which opens up a tremendous risk of human error. IT automation helps to eliminate…
Apa “Tata Kelola Teknologi Informasi” (IT Governance) Itu?
Investasi Teknologi Informasi yang sampai menghabiskan milyaran rupiah pada perusahaan skala menengah dan besar tersebut, sepertinya sudah tidak ekonomis lagi jika hanya ditujukan untuk meningkatkan efisiensi, efektivitas dan kecepatan kerja organisasi. Perkembangan TI yang semakin canggih dan serba bisa tersebut, mulai diarahkan menjadi enabler terhadap peningkatan kinerja suatu organisasi. Yang kemudian memunculkan kesadaran, terutama di dunia industri, bahwa tanggung jawab pengelolaan TI tidak bisa sepenuhnya diserahkan ke unit/bagian/d…
Beberapa tipe Policy
The Executive View Most textbooks on policy development focus on the technical side of matters. For example, some go to great lengths about all the details of access control. In doing so they achieve two ends: Firstly, and most obviously, this technology-focused approach results in a mass of technical details. This often confuses what is policy, what is standards and what is procedure. Secondly, resulting from this, the overwhelming consequence is that the policies are obtuse and incomprehensible to much of the organization, not least…
Dibalik Policy
Beyond Policy The Policy process is just the start of a comprehensive security plan The policy defines the organization’s attitude towards security and makes clear that all members have a part to play in creating and enforcing a suitable culture of security. The best policy and security functions are to no avail if they are not observed or not used. Next is the task of converting the policy into practice, which requires an explicit plan. Identify the assets, tangible and intangible and estimate their criticality and value Assess the …
Membuat Policy
Developing Policy Policy can mean different things to different people and be structured in different ways according to the needs of the organization. This section looks at some of those ways. [ Back to top ] Effective Security Systems Require Explicit Policies Policies are an organization's most effective tool for good governance and the smooth running of operations. They are management's instructions on how the organization is to be run. "Policy: Clarifying What is expected." Policies are essential to…
Guna dari IS Awareness adalah utk merubah perilaku
Awareness The purpose of Information Security awareness is to change behaviour. Policy can only do so much,and no matter how well written and communicated, it will always have gaps. Awareness helps to bridge those gaps by bring people to understand aims and objectives of security. Hopefully with this understanding they will not only follow the letter of policy but the spirit as well. Awareness – and awareness training – is not the objective; it is just a a step on the way to changing the way people behave. The purpose of Information …
Keuntungan dari Policies & Procedures
Benefits Policies provide a framework within which to define roles and responsibilities, to formulate and justify any regulations and to make explicit the organization’s attitudes towards any actions that threaten its assets. They are sometimes described as “Management’s instructions as to how the organization is to be run”. Overall the policy must define the place that information security plays in supporting the mission and goals of the institution. Developing a security policy is the first step to improving your organization’s secur…
Policies & Procedures
Policies & Procedures Overall, Policies are an organization’s most effective tool for good governance and the smooth running of operations. They are management’s instructions on how the organization is to be run. Policies are essential to the effective, efficient and reliable operation of an organization. They lead to smooth, consistent and efficient operations. Properly structured, Policies are general statements that do not need to be revised as the details of technology and products change. Policies are accompanied by guidelines …
Beda Audit dan Assessment
Audit & Assessment What’s The Difference? So, what’s the difference between and Audit and an Assessment? Essentially it is in the degree of formalism involved. An Audit is usually against some formal definition or standard, which may be externally defined, such as ISO -27001 or PCI : DSS , or a law or regulation such as Sarbanes-Oxley in the US or the Canadian PIPEDA. Such audits will have a clearly defined methodology and a clear report of the degree of conformance. Management should think of the deficiencies reporte…
Governance ?
Governance Simply put “governance” means: the process of decision-making and the process by which decisions are implemented (or not implemented). Governance can be used in several contexts such as corporate governance, international governance, national governance and local governance. And of course, out concern: IT Governance. Corporate governance has been a high profile topic in recent years principally because of public concern at a lack of control at the top of organisations. There is a perception that, in certain cases, senior manag…
Mana yang governance , dan mana yang tidak ?
What Governance Is ... and Is NOT There is a growing interest and awareness of IT Governance, but a new ISO standard (see sidebar) makes clear that the term is often misused. What we are really seeing is a rise in interest in IT Governance and Information Assurance – sometimes termed Information Security. These two, long with Service Management ( ITIL ) these will provide the three supports for business-IT alignment. But Governance is something distinct. It has a passive part and an active part – the ying and yang. The active part o…
5 Domain dari IT Governance
The Five Domains of IT Governance Strategic Alignment Value Delivery Performance Management Risk Management Resource Management The essential components of IT governance can be expressed as follows: IT governance overall is about delivering value and managing risk. Value delivery, which embodies the concept of risk-related returns, is perhaps the most important. Value delivery is not possible without strategic alignment and resource management. It is impossible to provide transparency of success or failure without pe…
Apa kah IT Governance itu ?
Over the past few years one of the most common topics with customers seeking to improve their overall performance of the IT groups was “governance”. It often showed up in the following statements: • “The key to our success is governance” • “What we are really missing is good, solid governance” • “We would be doing better if we only had good governance” After a while, this got me to thinking. What does ‘governance’ mean? Apparently, it is important to have it. However, when I started talking with people I started to get widely di…
Social Plugin