Identifier	SPEC 11
Author	Hulse, Kevin M.
Title	IT controls maturity model
Publisher	Central Connecticut State University
Date of Publication	2007
Resource Type	Special Project
Abstract	Increased regulatory compliance requirements and risks are driving IT organizations to formalize control activities associated with their IT systems. The purpose of the ITCMM capstone project is to define an IT Controls program, control activity selection approach, and method for measuring maturity in support of an organizations regulatory compliance and risk mitigation requirements. A literature review and survey tool confirmed the ITCMM Capstone team's initial hypothesis - the majority of existing literature and the current state of IT Control programs focus only on control activities, no single industry standard framework will meet all of an organizations control requirements, and measuring maturity is subjective and not accurately reflecting the actual maturity levels of control activities. These gaps create risks that IT Control initiatives will not be properly structured to meet regulatory requirements or properly aligned to risk. An analyses of IT governance best practices, interviews, and experience with IT audit, risk assessment, and enterprise architecture were used to develop the components of the ITCMM IT Controls program. The ITCMM team identifies eight program components that are necessary in order to better align the program to actual risks, meet regulatory requirements, provide evidence of compliance, and enable the organization to scope and prioritize the implementation activities of the controls program. In addition, three existing frameworks for the selection of control activities are identified and compared for relevancy, strengths, and weaknesses. A method of measuring maturity is defined and can be leveraged by an organization looking to self-assess the maturity of its program and improve. A web site and tutorial is also provided to assist novices with a roadmap to implementation of the IT Controls program.
Subject	Capability maturity model (Computer software) Management information systems
Department	Department of Management Information Systems & Computer Engineering Technology
Advisor	D'Onofrio, Marianne J. (Marianne Josephine), 1942-
Contributors	Hou, A-wen Sundaram, Ananda
Type	Text
Digital Format	application/pdf
Language	eng
OCLC number	713734382
Rating

IT controls maturity model

Description

Tags

Comments