Assignment: IT Governance Paper
Instructions
Project Scenario:
You are working for a company that provides consulting services for customers surrounding IT auditing. Your job is the IT Auditor. In the role of an external IT Auditor, you will be starting a project with a new customer. As you begin your project, there will be several activities you will be required to complete to ensure your customer understands the importance of IT auditing, as well as recommendations for governance and infrastructure to ensure organizational success.
The project will require you to prepare a comprehensive paper that includes:
• IT Governance benefits
• Auditing objectives
• Risk assessments
• Service Level Agreement (SLA) and incident-management planning
• Security policies and procedures
Your Individual Project will build upon itself Partly:
• Part One:
o Leverage your role to educate your customer on IT Governance
• Part Two:
o Include opportunities to highlight auditing objectives relevant to the customer
• Part Three:
o Risk Assessment based on certain types of network usage
• Part Four:
o Define incident-management plans
• Part Five:
o Define a Service Level Agreement
• Part Six:
o Aggregate the past Parts' papers, while adding information regarding security policies and procedures
Note. If you are not currently working with an organization, draw upon previous experience or interview someone on this topic
Part 1
Scenario: Prior to completing your full evaluation, you will meet with a new Director of IT at your customer site. The project sponsor has asked you to spend time with their new Director and educate him on the importance of IT Governance.
Write a 2- to 3-page informational paper that provides:
• The definition IT Governance and why it is important in the IT industry
• Key aspects of IT Governance
• Description of IT steering committee and the role each member plays
Note. If you are not currently working with an organization, draw upon previous experience or interview someone on this topic.
Format your paper according to APA guidelines. Minimum of 2- 3 references for individual assignments.
Part 2
Scenario: Your customer has asked you to gather details to meet IT audit requirements. You need to send them a report on IT audit objectives, risk assessment, and what help you may need from them to complete this task.
Write a 2- to 3-page paper that discusses:
• What are some of the strategic and operational objectives for planning for the audit?
• What are different risk assessments you need to consider during an audit process?
Format your paper according to APA guidelines. Minimum of 2- 3 references for individual assignments.
Part 3
Scenario: Your manager has asked you to investigate the exposure to external users doing transactions over the internet.
Prepare a 3- to 4-page report for the top management explaining:
• Risk and exposures associated with conducting transactions over the Internet
• Threats related to operating systems and networks
• Risk related to different database deployment models in a distributed environment
Format your paper according to APA guidelines. Minimum of 2- 3 references for individual assignments.
Part 4
Scenario: Your customer has asked you to explain how incidents will be handled to support their services.
Write a 2- to 3-page paper that addresses the problem with management structure and explaining the process of handling the incident.
Format your paper according to APA guidelines. Minimum of 2- 3 references for individual assignments.
Part 5
Scenario: Your customer has asked you to define the Service Level Agreement (SLA).
Write a 2- to 3-page paper that defines the components required in the SLA.
Format your paper according to APA guidelines. Minimum of 2- 3 references for individual assignments.
Part 6
Compile Parts One through Five papers into a cohesive case proposal. The proposal should include:
• IT governance benefits (Part One)
• Auditing objectives (Part Two)
• Risk assessments (Part Three)
• Incident-management planning (Part Four)
• Service Level Agreements (Part Five)
• Security policies and procedures (Part Six)
• Recommendations (Part Six)
Be sure to educate the client with industry standards and best practices and ensure the current and future systems meet the compliance standard.
In addition to compiling the previous Parts papers, write 3 pages to include recommendations to address the following:
• What are some of the organization's policies and the infrastructure used to protect intellectual assets? And, does it meet industry standards and practices?
• Identify missing security elements in their current security practices and infrastructure and suggest possible plans and solutions to fix them in the current and future system.
Format your paper according to APA guidelines. Minimum of 2- 3 references for individual assignments.