Information and IT governance - IT Governance

8 important questions on Information and IT governance - IT Governance

What is the Sarbanes-Oxley act?

SOX (2002)

US federal law setting new standards for publicly traded companies
- top management must individually certify accuracy of financial information
- severe penalties for fraudulent activities
- increased independence of external auditors

Section 404: Assessment of internal control
- internal control report: "the responsibility of management for establishing and maintaining an adequate internal control structure and procedures for financial reporting"

Code Lippens (BE), Code Tabaksblat(NL)

What is internal control?

A process, effected by an entity's board of directors, management, and other personnel, designed to provide reasoonable assurance regarding the achievement of objectives relating to
1. Effectiveness and efficiency of operations
2. Reliability of financial reporting
3. Compliance with applicable laws and regulations

What is SOX compliance?

Compliance with the Sarbanes-Oxley Act

COSO's internal control: integrated framework is the most commonly used framework for demonstrating SOC compliance
- not IT specific
- but IT forms a cornerstone for compliance, reporting, risk management etc.

Therefore: IS or IT governance frameworks
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

WHich other grameworks and standards are there?

ISO/IEC 38500: Corporate Governance of IT
ISO/IEC 31000: Risk Management
ISO/IEC 27000: Information Security Management
ISO/IEC 20000: IT Service Managements
Prince2: Projects IN Controlled Environments
PMBOK: Project Management Body of Knowledge
TOGAF: The Open Group Architecture Framework
CMMI: Capability Maturity Model Integration
ITELv3: Information Technology Infrastructure Library

What is a COBIT enabler?

A key factor that infleunces whether the governance and management enterprise IT will be succesful
 
7 categories
- principles, policies, frameworks
- processes
- organisational structures
- culture, ethics, behaviour
- information
- services, infrastructure and applications
- people, skills and competencies

What management methods are there

RACI chart
Responsible, Accountable, Consulted, Informed

Maturity models
: process evolution on 3 aspects: continuum, capability attributes and method of achievement

What is the difference between Governance and Management

Governance
- evaluate
- direct
- monitor

Management
- Plan
- Build
- Run
- Monitor

What is the conclusion of this chapter?

Recent problems with governance and internal control
- SOX compliance
- COSO internal control, integrated framework
- IT play a fundamental role in setting up governance and internal control structures

IT Governance frameworks
- practical guidelines for achieving governance/internal control through enterprise IT
- many professional guidelines and frameworks available
- developed by professional certification organizations

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo