Assuring IT Governance

by Robert E. Davis

Depending on the abstraction level, IT governance can be viewed as a framework, methodology, or technique. As a framework, IT governance enables a “system of controls” assisting in assuring organizational goals and objectives are achieved effectively and efficiently. As a methodology, IT governance furnishes a description of the role entity direction and controls play in achieving information systems objectives. Lastly, as a technique, IT governance provides processes and steps that can generate superior financial and/or reputational returns for stakeholders.

Whatever your perspective may be, the importance of effective and efficient IT governance cannot be overlooked in the current global high technology environment. Considering what is at stake politically, economically and technically for most organizations; usually justifying IT governance deployment based on one viewpoint narrows suitability and expected benefits. In the final analysis, combining the potential individual abstraction levels may be the most appropriate support for implementing IT governance.

“Assuring IT Governance” was written with the intent to create quality quick reference material for assurance service practitioners. Therefore, this pocket guide is appropriate for entity employees interested in ensuring, or verifying, the design and deployment of IT Governance. As for content; Audit Managers, Chief Compliance Officers, Chief Information Officers, Auditors, Information Technology professionals, and Control Self Assessment personnel will find this pocket guide an informative, and authoritative, IT Governance document.

74 pages, Kindle Edition

First published June 28, 2011

About the author

Dr. Robert E. Davis obtained a Bachelor of Business Administration degree in Accounting and Business Law, a Master of Business Administration degree in Management Information Systems, and a Doctor of Business Administration degree in Information Systems Management from Temple, West Chester, and Walden University; respectively. In addition, during his twenty years of involvement in education, Dr. Davis acquired Postgraduate and Professional Technical licenses in Computer Science and Computer Systems Technology. Dr. Davis also obtained the Certified Information Systems Auditor (CISA) certificate -- after passing the 1988 Information Systems Audit and Control Association’s rigorous three hundred and fifty multiple-choice questions examination; and was conferred the Certified Internal Controls Auditor (CICA) certificate by the Institute for Internal Controls.

Since starting his career as an information systems (IS) auditor, Dr. Davis has provided data security consulting and IS auditing services to the United States Securities and Exchange Commission, United States Enrichment Corporation, Raytheon Company, United States Interstate Commerce Commission, Dow Jones & Company and Fidelity/First Fidelity (Wells Fargo) corporations as well as other organizations; in staff through management positions.

Prior to engaging in the practice of IS auditing and information security consulting; Dr. Davis (as a corporate employee) provided inventory as well as general accounting services to Philip Morris, USA and general accounting services to Philadelphia National Bank (Wells Fargo). Furthermore, he has prior experience as a freelance writer of IT audit and information security training material. Specifically, his published credits include:

•Assuring IT Legal Compliance

•Ensuring Information Assets Protection

•IT Auditing: An Adaptive Process

•IT Auditing: Assuring Information Assets Protection

•IT Auditing: Business Continuity and Disaster Recovery

•IT Auditing: Information Assets Protection

•IT Auditing: Information Security Governance

•IT Auditing: Irregular and Illegal Acts

•IT Auditing: IT Governance

•IT Auditing: IT Service Delivery and Support

•IT Auditing: Systems and Infrastructure Life Cycle Management

•IT Auditing: The Process

Dr. Davis has authored articles addressing IT issues for The Institute of Internal Auditors, IT Governance LTD and ISACA as well as furnished Internet content to Techtarget.com, Toolbox.com and Suite101.com. Additionally, his editorial experience includes reviewing Carnegie Mellon University's technical report "Comparing eSCM-SP v2 and COBIT" and five chapters of Bloomsbury's "Effective Auditing for Corporates".

In regards to training individuals in the information systems audit process, he has provided instruction to the Data Processing Management Association, ISACA-Philadelphia Chapter CISA Review Course participants, 3rd Annual Securasia Congress delegates and an Internet CISA study group.

Based on his accomplishments, Dr. Davis has been featured in Temple University's Fox School of Business and Management Alumni Newsletter as well as The Institute for Internal Controls e-newsletter. Furthermore, he has achieved recognition as the (First and Inaugural) Temple University CISA in Residence and a Temple University Master of Science in IT Auditing and Cyber-Security Advisory Councilmen. Lastly, he has accepted invitations to join Delta Mu Delta International Honor Society, the Golden Key International Honour So

Reviews

[Jeff Alto · Rating 5 out of 5]

Robert Davis provides a unique perspective in his self published book, Assuring IT Governance. Throughout the book he gives a thorough explanation of each particular IT governance area including IT Strategic Alignment, IT Value Delivery, IT Risk Management, and IT Performance and Resource Management. This book can be read by anyone who has an interest in this topic or needs to gain a better understanding of IT Governance. I would recommend this book for IT Auditors, IT Management, and Senior Level Management of an organizations.

[Hamdi Moussa · Rating 5 out of 5]

An excellent comperhenive resource book