IT Governance Blog on IT governance, risk management, compliance and information security.

ITILv3 is the world-wide best-selling IT management framework.

If you are implementing ITIL best practice within your organisation and want to purchase the complete set of the five core publications plus The Official Introduction to the ITIL Service Lifecycle, the unique Complete Library Plus is available in book format, as well as in electronic PDF download and annual subscription formats.
(more…)

Only while spaces available!

• 30% off!
• First come, first served;
• Applicable to 100% of the January ITG Training range!
• Prices only available while we have course vacancies!
• Book and pay in December, attend training in January 2010;
• Enter DECITG @ checkout or Call: 0845 070 1750

• Download our Training Catalogue Now!

(more…)

The Information Commissioner’s Office (ICO) have launched a new Guide to Data Protection which aims to “provide businesses and organisations with practical advice about the Data Protection Act and dispel myths. The guide will help organisations safeguard personal data and comply with the law.” explained Christopher Graham, Information Commissioner.

This new guide will help organisations comply with the law and demystify data protection. Once you have read it, you will need make an assessment of your current level of compliance with the DPA.

Our DPA Compliance Assessment Tool will help you with this. It also provides recommendations and identifies guidance to help you close any gaps that are identified.
(more…)

Business owners have been returning to their flood-damaged properties in Cumbria this week to assess the damage after unprecedented rainfall prompted some of the country’s worst ever flooding.

The full extent of the damage caused by these floods will not be known for some time; but it’s estimated that flood claims could exceed £100m!

Business owners and managers, upon viewing the devastating scenes broadcast on television during the floods, will be questioning how their organisation would cope in similar circumstances and, for the sake of their very survival, will ensure adequate business continuity plans are put in place.

It sometimes takes a disaster like this to remind people of the very real threat that organisations face and the possible implications which could result if not fully prepared.
(more…)

Avoid Re-Inventing Existing Wheels

Every organization who licenses personal information about a resident of Massachusetts shall be in full compliance with 201 CMR 17.00 on or before March 1, 2010.

ISO/IEC 27001:2005 directly covers 95% of the 201 CMR 17.00 requirements without modification and with a few specific requirements added to support the prescriptive requirement to encrypt personal information, ISO/IEC 27001:2005 provides a truly comprehensive information security program that will stand-up to the next round of state and/or federal regulations.
(more…)

Our next Implementing ISO20000 Training Course is in London between 30 November and 02 December, We have a few seats remaining and are offering the following special benefits for bookings made this week:

• Save £100 – making this by far the most cost effective ISO20000 course on the market;
• Free Access To Our KnowledgeBank – until the end of the year!
• Pass The Course Guarantee – we are so certain that our teaching will help you pass the course that, if you do not, we will let you attend a future course for free;
• Free: Two Key Supporting Guides:
  1. ISO/IEC 20000: A Pocket Guide; &
  2. Implementing ISO/IEC 20000 Certification – the Roadmap.
• Comfortable training location – enjoyable meals and refreshments;
• The exam fee is included in the price – there are no hidden extras.

(more…)

IT Governance produce and package many toolkits that fall within the broad range of IT governance subjects, including information security, compliance, risk management, ITIL, IT Service Management, Management Systems, Business Continuity, etc.

Below is a range of our most popular toolkits which are being used to accelerate compliance projects in organisations accross the globe.
(more…)

• Reports are being investigated of a major credit card scam in Spain;
• Two suspected computer hackers have been arrested in Manchester in a major inquiry into a global internet scam designed to steal personal details;
• The personal details of 817 E.On customers have been disclosed in error.;
• T-Mobile staff sold personal data.

These are just a few headlines from the press this week!

The Information Commissioner, Christopher Graham, is highlighting new evidence which shows that a deterrent custodial sentence is required to stop the trade in unlawful personal information. Christopher Graham is responding to the government’s proposal to introduce a custodial sentence for breaches of Section 55 of the Data Protection Act from 1 April 2010.
(more…)

Our best selling No 3 ISO27001 Comprehensive ISMS Toolkit has been updated to give you even more resources and value for money!

• The BS7799-3 Standard, a portion of the 3 ISMS Standards, has now been replaced with ISO27005 Standard on risk assessments;
• And the following additional products have been added to the toolkit:

(more…)

There are many reasons for an orgnanisation to outsource its IT function, it enables a company to obtain an efficient and responsive IT system, while at the same time allowing the company to focus on its core strengths.

Done effectively, outsourcing can give you a competetive advantage. There are however, many pitfalls which you will need to avoid.

Consider - The IT function is nearly always a business-critical operation. This means that outsourcing IT will give a supplier control over a function that is vital to your organisation’s survival and success.
(more…)