SHARE Follow this article on Twitter Facebook LinkedIn Bookmark and Share

Dan Swanson: Best practices abound


The amount of valuable information available continues to amaze me. The study, and then application, of recommended practice(s) also continues to be a huge challenge, but it is better than trying to reinvent that wheel, over and over again.

 

I’d really welcome hearing about any leading resources regarding the successful implementation of change and application of new technologies and solutions.

 

Have another great week.

 



Dan Swanson

 



 



1. ValIT – a framework addressing the governance of IT-related business investments

Val IT is a governance framework that consists of a set of guiding principles, and a number of processes conforming to those principles that are further defined as a set of key management practices. Val IT addresses assumptions, costs, risks and outcomes related to a balanced portfolio of IT-enabled business investments. It also provides benchmarking capability and allows enterprises to exchange experiences on best practices for value management. www.isaca.org/ValIT

 



 

2. Words of Wisdom: UCLA Legend John Wooden

During his coaching career at UCLA, John Wooden led the basketball team to an 88-game winning streak and 10 NCAA championship titles. But Wooden is equally famous for being a mentor and lifelong teacher, with several books published on his insights and methods for leadership. The following include some of the key strategies he still teaches today-at 97.

http://www.successmagazine.com/Words-of-Wisdom-UCLA-Legend-John-Wooden/PARAMS/article/308/channel/19

 

3. Risk Oversight

Who on the board is responsible for overseeing risk assessment and management? This is an issue being discussed in many board rooms and at many governance conferences. The NYSE corporate governance listing standards state that "while it is the job of the CEO and senior management to assess and manage the listed company's exposure to risk, the audit committee must discuss guidelines and policies to govern the process by which this is handled." Specifically, the audit committee "should discuss the listed company's financial risk exposures and the steps management has taken to monitor and control such exposures."

https://www.corpgov.deloitte.com/site/us/menuitem.6dc07b606d1d5056730459246cdf8a0c/


 


4. Contesting Consensus Decisions

"Consensus" is just a buzzword in our organization. We talk about making consensus decisions, but what really happens is that after everyone has shared input to the pool of meaning, the senior manager will force his view as the only solution. The rest of the team will then defer because they know that the management will have the last say anyway.

http://www.vitalsmarts.com/userfiles/File/newsletter/Newsletter%20051408QA.html

 



5. The IT Audit Checklist: Information Security, supports an internal audit of the organization’s information security program with guidance on improving information security programs and processes, as well as information on assessing the robustness of your organization’s security efforts. The paper is intended to help IT, compliance, audit, and business managers prepare for an audit of information security and, ultimately, to ensure that the audit experience and results are as productive as possible. http://www.itcinstitute.com/display.aspx?id=2499



blog comments powered by Disqus