Malware Security Policy: Lax immune surveillance can result in viruses infiltrating and destroying critical data. Hence a thorough and effective policy must be in place to ensure that viruses and other malware are regularly scanned for and eliminated. Some points … Continue reading →

Roles and Responsibilities Policy: It is incumbent on you to establish a high standard of “due care” for the ownership, use, and transmittal of information resources, i.e. your team must understand their responsibility towards IT governance, and know what behavior … Continue reading →

Internet Usage Policy: While the internet may be a major source of information for employees, as well as a means of communication with clients, vendors etc, it is also open to abuse and a major threat (in the form of … Continue reading →

Application Development Policy: Your organization uses many software applications, some that you purchased, and some that you may have developed yourself. Your IT governance policy for these applications must ensure that only authorized personnel have access to them, that they … Continue reading →

In any organization, auditing is too important a task to be left to auditors. Auditing is a two-step process – firstly, your organization’s internal auditors must approve of the financial transactions, which are then scrutinized by external auditors. Before internal … Continue reading →

If Information Technology is not your organization’s core line of business, your organization may be unaware of what and how much impact you have on its costs, revenues and profitability. Your audit and finance departments might treat IT as a … Continue reading →

When you start out implementing IT governance, you have to begin by knowing where you stand. Some policies may be in place, some you will have to create. The existing policies may themselves need review, amendment, or be replaced completely … Continue reading →

“A little learning is a dangerous thing” In today’s corporate world where knowledge is power, information technology, by providing the tools for managing knowledge, is the basis of that power. The use and abuse of information technology has thus become … Continue reading →