As part of the regulatory compliance process and the streamlining of public administration, the Peruvian government has implemented the National E-Government Plan in all state institutions with the aim of providing citizens with solid services based on the use of Information and Communications Technologies (ICT). As part of the regulations, the requisites to be met by public institutions have b...

Although practitioners have mapped the alignment between IT-related standards, this work has rarely been reported in the academic literature. In particular the methods used have not been made explicit, which has limited the value of any reported results. The research described in this paper demonstrates a rigorous method for mapping the alignment between two example IT security standards. The t...

IT Governance hat zum Ziel, dass die Unternehmens-IT die Strategie und Geschäftsziele des Unternehmens möglichst effizient unterstützt. Um dies umzusetzen, existieren mehrere international anerkannte Verfahren und Standards wie z.B. COBIT, ITIL oder ISO 20000. Diese sind jedoch konzeptionell gehalten und machen meist keine Vorgaben zur technischen Umsetzung. Dieser Beitrag untersucht, wie mit H...

This work deals with IT governance integration in an information system (IS), since it’s one of the main worries to maintain alignment between information technologies and business strategy. It uses COBIT as IT Governance framework saw its generic, and flexible appearance to produce a measurable picture of the current state of IS, through structured IT control activities. It appealed to Loose I...

Özet. Proje yönetimine yol göstermek ve yönetişimi sağlamaya yönelik endüstride kullanılmakta olan standartların bir kısmı genel olarak proje yönetimini hedeflerken bazıları da bilgi güvenliği ve hizmet sunumu gibi özel konulara odaklanmaktadır. Çalışma kapsamına etkin bir bilgi teknolojileri proje yönetimi süreci için kullanılan proje yönetimi standardı olan PMBOK ve genel Bilgi Teknolojileri ...

In 2002, the Sarbanes-Oxley Act was passed into law requiring all U.S. based, publicly traded companies to report on the status of their internal controls governing the reporting of financial information. Because of the close relationship between financial reporting and IT, the requirements of the Sarbanes-Oxley (SOX) Act has also greatly impacted IT Governance and the way IT projects are manag...

It is evident that organizations are demanding more efficient information management technologies in order to offer high quality services for both internal and external clients. Firms pursue the implementation of processes aligned to their strategic and operational objectives and, to achieve these goals, they usually introduce various frameworks and approaches to information technology service ...

Reference models such as ITIL and COBIT (Control Objectives for Information and related Technology) represent proven best practices and provide key indicators for the design and control of ITSM processes. The idea behind the development of ITIL is the recognition that organizations are becoming increasingly dependent on IT in order to satisfy their corporate aims and to meet their business need...

Security is a subprocess that affects all processes within an organization structure. The control frameworks of CobiT and ITIL provide a mapping of organizational roles from the capital interest at the highest level, through to the implementation level in an enterprise system. Both control frameworks provide varying capability for control at different levels in an organization and leave the pro...