Speaker: Mr. Derek Oliver

In 2008, ISACA entered into a formal agreement with the University of Southern California (USA) Marshall School of Business Institute for Critical Information Infrastructure Protection to continue the development of its Systemic Security Management Model. The Business Model for Information Security takes a business oriented approach to managing information security, building on the foundational concepts developed by the Institute. It utilizes systems thinking to clarify complex relationships within the enterprise, and thus to more effectively manage security.

Attachments:

Business Model for Information Protection - 1st June 2009.pdf	[ ]	217 Kb
Slides to Presentation	[ ]	804 Kb

This special publication is a compilation of six articles that appeared in the ISACA Journal’s IT Value column during 2008 and 2009. The articles touch on the practicalities of introducing and establishing the Val IT framework. These articles have drawn on the authors’ many years of experience working with enterprises to introduce and embed value management. The articles cover the need for Val IT, the steps for introducing it, practical guidance on implementing the three Val IT domains and the critical success factors for introducing Val IT.