This useful guide clarifies the steps you have to follow to develop an ISO 27001-compliant ISMS. Each step is integral in how secure your information security system is.
Managing the Cost and Complexity of Compliance Through Governance
sponsored by McAfee, Inc.
Premiered:
23 Sep 2009
Language:
English
ABSTRACT:
With a labyrinth of ever-changing regulations affecting companies today, regulatory compliance is never done. IT organizations that have met immediate compliance needs with point products to individual mandates soon find they need a more strategic and orchestrated approach. In short, they need to incorporate a risk-governance model that will treat compliance like any enterprise wide program: one that involves key stakeholders in regular reviews and establishes processes and benchmarks through use of a common framework.
Watch this videocast to learn:
How to avoid wasting time and money on redundant or inefficient efforts by developing a unified compliance program
Criteria for selecting a compliance framework such as COBIT, ITIL or MOF;
How to keep up with continuous regulatory change in the U.S. and other countries
Lessons learned by other companies who have gone down the compliance program management path.
Speaker
Laurence Anker
Engagement Manager, Jefferson Wells International
Anker has more than three decades of experience supporting organizations' information technology requirements, addressing audit, control and security objectives, risk identification and mitigation, and business requirements definition. His diverse experience, both hands-on and in leadership roles, has included Technology Risk Management and IT Auditing, SOX compliance, IT Strategy, Business Continuity Planning, Project and Program Management, SDLC Methodology Adoption, Business Process Reengineering, Business Requirements Definition, and Quality Assurance. Larry led the Insurance Industry practice for Ernst & Young's New York ISAAS Group, was a Senior Manager at KPMG, the EDP Audit Manager of the North American Operations of Swiss Reinsurance.