IT Policy and Procedure Assessment & Development
Process Partners provides assistance in the assessment and development of information technology policy and procedures. For many companies, ensuring that IT policies and procedures are formal, up-to-date and effectively implemented is a major challenge. Process Partners leverages its information technology general control, compliance and regulatory, risk management and IT governance experience and skills, to improve the value added by formal IT policies and procedures. Most importantly, Process Partners establishes a proven and sustainable process for evaluating, developing and maintaining IT policies and procedures.
Situation
Management is confronted with constantly changing IT environments, compliance and regulatory requirements, and risks. IT policies and procedures are the corner stone of a strong IT governance, regulatory and compliance environment. Management faces increased costs and fewer internal resources to develop, maintain and implement IT policies and procedures.
Opportunity
Without adequately developed and implemented IT policies and procedures, management cannot effectively control and monitor the IT environment. IT policies and procedures help address key risks including unauthorized access to critical information and IT resources, unauthorized or unapproved changes to critical applications, databases, and financial information, and uncontrolled day to day IT operations such as backups, job scheduling, job processing, and user account provisioning.
Approach
Process Partners knows and understands the key criteria and the most effective process for assessing and developing IT policies and procedures. Our experience with information technology general control, compliance and regulatory, risk management and IT governance experience and skills, to improve the value added by formal IT policies and procedures. Process Partners can assist management in maintaining, developing and implementing a comprehensive set of IT policies and procedures which govern IT change management, IT security, IT operations and the overall IT “tone at the top”.
Some examples of the IT policy and procedures typically developed and maintained include:
- Computer Use
- Computer Operations
- IT Change Request
- Backup and Restoration
- Password Configuration
- Logical Access Provisioning
- IT Security Incident Handling
- Physical Security for Data Center
Our approach is flexible and comprehensive. It is driven by a need to establish a proven and sustainable process for evaluating, developing and maintaining IT policies and procedures.
Experience
References offer the best evidence of our experience. Feel free to request a reference list of organizations and contact information.
|
