Information Technology and Systems
<< Previous Chapter
Chapter 13 : Information Resources Management and IT Governance
Managing Information Resources and Technology
Definition of Information Resource Management
Objectives of IRM
Elements of IRM
IRM and Knowledge Management
Information Technology and Organizational Needs
People
Tasks
Technology
Culture
Structure
Information Security and Controls
ISO 17799 Standards
Cryptography
Ethical and Social Dimensions of Information Technology
Privacy
Accuracy
Property
Accessibility
Disaster Recovery and Business Continuity Planning
Disaster Recovery Planning
Business Continuity Planning
IT Governance
Overview of IT Governance
IT Governance and Sarbanes-Oxley Act
IT Governance Frameworks
Chapter Summary
|
Information resource management (IRM) is a new concept and is used in the
management of information to facilitate the smooth flow of productive and
updated information across the departments in the organization. Knowledge is
the result of using information combined with human experience. Knowledge
management is the process of creation, retention, updation, dissemination,
and exploitation of knowledge. Knowledge management encompasses IRM in scope
and IRM acts as the platform for carrying out the knowledge management
efforts.
Security of organizational information has become a prime concern for every
organization that implements information systems. Threat from internal and
external manipulators of information is on the rise and managements too have
gone ahead with implementation of more secured systems to protect their
information from any threat. In this scenario, information security
management has gained importance and the British Standards Institute came
out with a standard for information security management called ISO 17799 in
2001. According to this standard, managements have to install various
security controls to protect the information. |
|
The social and ethical dimension of IT is an evolving concept and it
addresses those issues which are considered unethical and/or illegal in the
implementation and usage of information systems. Four ethical areas have
been identified by Mason on these issues. They include right to privacy,
right to accuracy, right to property, and right to access (PAPA).
To face events that create disaster and impact on the business operations,
an organization needs to go in for business continuity planning (BCP) and
disaster recovery planning (DRP). BCP and DRP are processes that are
essential to any organization as they ensure continuity of business even
during unforeseen circumstances. These processes help an organization to
prepare for any sort of disruptive events even if it is a power blackout or
a natural disaster.
The need for IT governance has gained prominence after companies started
using IT in business operations. This need gained even more importance after
a series of accounting scams took place and resulted in the passing of
legislations like the Sarbanes-Oxley (SOX) Act. The chapter discusses the
salient features of the Act and its role in IT governance. Frameworks for IT
governance include Control Objectives for Information and Related Technology
(COBIT), IT Infrastructure Library (ITIL), and the Balanced Scorecard.
Next Chapter>>
|
|
Short Case Studies / Caselets