IT/IS Strategy Governance and Legislation

Also information systems assist with making decisions and business processes by formulating strategic plans and make decisions for the organisation longevity and prosperity. Additionally information systems add controls to employee processes, ensuring

This article makes up Chapter 1 of the free, open access book titled, Information Systems: A Manager's Guide to Harnessing Technology, by John Gallaugher. Please ensure that you read the entire Chapter 1 of the book consisting of 3 parts (Part 1 Introduction; Part 2 Don’t Guess, Gather Data; and Part 3 Moving Forward).

In the world of business, information technology strategy has been overlooked by owners for they are so focused on marketing strategies. Keeping up with the use of information technology is in just about all types of industrial process and just as important. It has been a proven fact that it contributes to the development of strategies and tactics when developing a product or service. During the twentieth century the accelerated progress in information technology has developed a large variety of technologies for the collecting and storage of information such as the Internet, software companies, and personal computers.

| “Security controls are the management, operational, and technical safeguards or countermeasures employed within an organizational information system to protect the confidentiality, integrity, and availability of the system and its information” (NIST SP 800, 2009). The control allows the organization to efficiently mitigate the risk coming from the use of information System (IS) to conduct business operations and processes.

p. 10). Other controls include: Asset Classification and Control maintains an appropriate level of protection for all critical or sensitive assets. Communications and Operations Management reduces the risk of failure and its consequences by ensuring the proper and secure use of information processing facilities and by developing incident response procedures. Systems Development and Maintenance prevents the loss, modification, or misuse of information in operating systems and application software. Business Continuity Management develops the organization’s capacity to react rapidly to the interruption of critical activities resulting from failures, incidents, natural disasters, or catastrophes. Compliance ensures that all laws and regulations

This paper will discuss how an information system is critical to the business process of an organization and how the information has impacted the organization 's structure.

IT Governance is an internal IT strategy used to analyze and prioritize current and future IT projects through the IT governance process. It involves assessing current projects, defining future vision, and ensuring project road maps are structured properly. “Good governance enables you to make and implement better decisions faster, and provides the foundation for weaving together business and IT strategies (Broadbent, Kitzis, 2005).

The major goal is to integrate Information Systems/Information Technology with the corporate strategy to use information for better governance and management. This has improved with the connectivity and networking and also the shrinking cost- performance ratios in technology. IT governance thus is a result of the complete merger of computer and communications technologies, like data processing and high advancement in networks, and integrated systems. (Bloomfield; et al, 2000) To this extent the software of the stand alone systems have to be converted to a single functional system for all requirements and the system involves the creation of a network with the following functionality:

General Controls include software, hardware, computer operations controls data security, implementation, administrative controls and basically dictate all aspects of the organizations information technology infrastructure. Software controls monitor systems and prevent access from authorized users. Hardware controls make sure that the actual hardware is safe and is always checking to make sure that the equipment doesn’t malfunction. This also covers the backup systems. Computer operations controls keep the data in check by correctly storing it. Data security does just as it suggests keep the data safe in whatever form so that it is not destroyed or altered. Implementation is basically the systems checker and makes sure that at each point the controls are working. Lastly administrative controls are used to create rules and procedures that need to be carried out in order to keep the system running in proper order.

This portfolio focus on what I have learned during the whole IT Strategy and Control paper, a critical reflection of this paper would be provided. This reflection includes the key points, support reference and the demonstration of my own understanding about the paper itself and all of my personal understandings are based on the learning outcome of this paper. In the first part of this portfolio, I would discuss all the key IT Operations Management framework which have been introduced in the paper, the analysis of the processes based on my own understanding would be given. In the second part, analyze processes required for aligning IT infrastructure and operations with the business goals of an organization would be talked about, and I would focus a business organization which has been mentioned in the caselets as a sample. In the third part, some critical evaluate operational IT organizations and their processes against the studied models would be listed and analyzed. In the last part, the recommendations and analysis of my own would be given against those organizations (caselets) which have some problems and current issues arising from the implementation of the IT framework.

ABSTRACT: Information Technology General Controls (ITGCs), a fundamental category of internal controls, provide an overall foundation for reliance on any information produced by a system. Since the relation between ITGCs and the information produced by an organization’s various application programs is indirect, understanding how ITGCs interact and affect an auditor’s risk assessment is often challenging for students. This case helps students assess overall ITGC risk within an organization’s information systems. Students identify

Information Technology (IT): The hardware and software technologies a firm needs to achieve its business objectives (Kenneth C Laudon and Jane P Laudon., 2010).

The meaning of the term “governance” is how reasonable and effective quotas are governed in the organisations. IG is an emerging concept of response to the imperfection of Information technology (IT) governance related to the increase crucial of information in the organisation. Information is used throughout the organisation as a business resource can be effectively managed, including the resolution of information conflict issues management. Especially, in information intensive banking industry (Kress, 2010). The meaning of the term “governance” is how reasonable and effective quotas are governed in the organisations. IG is an emerging concept of response to the imperfection of Information technology (IT) governance related to the increase crucial of information in the organisation. Information is used throughout the organisation as a business resource can be effectively managed, including the resolution of information conflict issues management. Especially, in information intensive banking industry (Kress, 2010). The meaning of the term “governance” is how reasonable and effective quotas are governed in the organisations. IG is an emerging concept of response to the imperfection of Information technology (IT) governance related to the increase crucial of information in the organisation. Information is used throughout the organisation as a business resource can be effectively managed, including the resolution of information conflict issues management. Especially, in

IT and Security Strategic Management, Policy and Architecture – Architectures, policies and strategies defined to run IT services Organizational Structure, Roles and Responsibilities and Standards for interactions between groups; authority for security and external security related

There are very many types of information systems. Classification of information systems follows the organizational levels in which they are used or installed for use. For instance, there are management information systems; some of which will be covered in this project report. Management information systems (MIS), helps businesses meet their business objectives. Almost all organizations and businesses today use management information systems; be it large, small, startup or an established multi-national. This is for the sole reason that information systems have evolved from just being a tool to gain competitive advantage for businesses, to a vital tool, a necessity in the digital age we live in. Management Information Systems help managers make better-informed decisions and communicate with their superiors, as well as with all the stakeholders in the businesses their organizations are involved in.