A Guide to Enterprise Risk Management
A very good discussion the definition, benefits and implementation considerations of enterprise risk management (ERM).
CIO Knowledge Base – Page 308
All Resources in: CIO Knowledge Base
Introduction to Common Criteria Scheme (CCS)
This presentation introduces the Common Criteria Evaluation and Certification Scheme, or CCS – an independent evaluation and certification service for measuring the security assurance and functionality claims of Information and Communications Technology (ICT) products and systems. What is it? Why is it important to you?
Enterprise Risk Assessment
This presentation discusses the evolving threats to systems, their "true impact" and enterprise risk assessment as a discipline to respond to them.
Business Continuity Plan
This is a step by step guide to creating a business continuity plan.
Business Resumption Planning
This presentation provides a good overview of planning and implementing business resumption strategy with illustrative case studies.
Virtualization and Security
This presentation provides an introduction to virtualization, virtualization architecture, key risks with virtualization, specific audit concerns and recommendations for evaluation of a virtualized environment.
IT Chargeback in a Virtualized World
This presentation details the challenges in cost based or usage-based cost allocation and chargeback in virtualized environments and proposes a model to addresses them.
Information Security in the Cloud
This presentation defines and describes cloud computing from an information security perspective.
Business and IT Alignment: An IT Governance Perspective
This presentation provides a very good overview of business and information technology alignment – definition, imperative and process – and IT governance – what is
CIO’s Guide to ITIL Framework V3 Essentials
This guide covers the essentials of ITIL V3, including its core components such as service strategy, design, transition, operation, and continual service improvement. It provides CIOs with actionable insights to enhance IT service management and align IT services with business needs.