Resultados de búsqueda: Libros de IT Governance Ltd

Unplanned absence from work could cost the UK economy as much as£12 billion a year!
 
When your organisation can no longer meet its deadlines, or provide customers with the high quality of service they expect, you have a problem. Unplanned absence also has a bad effect on morale, putting the rest of the team under pressure as they struggle to deal with the additional workload. Unplanned absence can occur as a result of force majeure (for example, when an airline is hit by strike action), or because of poor employee motivation and commitment.
 
This pocket guide, based on best practice guidelines, looks at what you can do to ensure your employees fulfil their obligations and turn up as required. It then gets to grips with the question of how your organisation should handle unplanned absences before and when they arise. While you may not be able to prevent unplanned absence altogether, the advice contained in this guide will help you to keep the extra costs and disruption associated with… Leer más

Address human vulnerabilities with this essential guide … Practical advice from an acknowledged expert – endorsed by BT!
Your business information is likely to be much more valuable than the hardware on which it is stored. The loss of a laptop might set you back £400, but if the files on the laptop included sensitive customer data or the blueprint for a new product, the cost of repairing the damage would run into thousands. The consequences of a data breach range from alienating customers to heavy fines, or even criminal prosecution. While technologies, such as antivirus software and encryption, can offer some protection against cybercrime, security breaches are most often the result of human error and carelessness.
 
Improve information security
Improving information security within your organisation, therefore, has to encompass people and processes, as well as technology. Motivating your team and making them more aware of security concerns should be at the heart of your information… Leer más

This pocket guide illustrates the technical complexities involved in computer forensics, and shows managers what makes the discipline relevant to their organisation. For technical staff, the book offers an invaluable insight into the key processes and procedures that are required.

Increasingly worried about security and compliance in the Cloud? Your questions answered – buy this guide today ...
 
The rise of Cloud Computing, with services delivered “in the cloud”, offers businesses incredible power and flexibility. It promises the efficient use of human and financial capital resources, reducing infrastructure and operation costs. It proposes a model of computing that is effective at meeting the demands of business in a rapidly changing environment.
Security and Compliance Issues
One of the most difficult challenges related to Cloud Computing, revolves around the security and compliance issues associated with it. This is a major concern and will continue to be so, with the ever increasing onslaught of regulations impacting security controls. 
 
This pocket guide explains and highlights some of the key security and compliance issues surrounding Cloud adoption, and provides helpful insight into how they can be addressed.
Read this pocket guide and …
 

Learn… Leer más

This�new pocket guide�is intended to meet the needs of two groups: Individual readers who have turned to it as an introduction to a topic that they know little about; and organizations implementing, or considering implementing, some sort of information security management regime, particularly if using ISO/IEC 27001.

Key features include:
The ISO/IEC 27000 Family of Information Security Standards
Background to the Standards
Specification vs Code of Practice
Certification process
The ISMS and ISO27001
Overview of ISO/IEC 27001:2005
Documentation &�Records
Management Responsibility
Policy &�Scope
Risk Assessment
Implementation

This pocket guide offers an overview of the purpose of the standard and shows how it can be used. Topics covered include qualification programmes, certification schemes and the interrelationship of ISO20000 with other standards, such as ISO27001. The overall emphasis of the guide is on ISO20K’s customer-driven approach, ensuring your IT service management processes will be aligned with the needs of your business.

This new�pocket guide in the Practical IT Governance series, provides initial guidance to all who are concerned with IT regulatory compliance in North America.
A key challenge for all IT executive teams is to ensure that the organization avoids breaches of any criminal or civil law, as well as any statutory, regulatory or contractual obligations, and of any security requirements.
Everyone in the IT organization (and outside it) needs to have an understanding of the legislation that applies to your organization. This Pocket Guide gives handy, easily-understood guidance on the key aspects of all the key regulations.

Knowing about information security is not enough. You also have to deploy it across the business - which means convincing management of its importance. Learn how with this essential guide!
Information technology plays a fundamental role in the operations of any modern business. While the confidentiality and integrity of your organisation's information have to be protected, a business still needs to have this information readily available in order to be able to function from day to day. If you are an information security practitioner, you need to be able to sell complex and often technical solutions to boards and management teams.
Persuading the board to invest in information security measures requires sales skills. As an information security professional, you are a scientific and technical specialist; and yet you need to get your message across to people whose primary interests lie elsewhere, in turnover and overall performance. In other words, you need to develop sales and marketing skills.
This… Leer más

Manage your IT services more effectively… This pocket guide will show you how.
Whatever your business, your capacity to supply products and services to your customers depends on your IT. Yet, all too often, companies and government departments fail to take effective control of their IT systems. Instead, organisations rely on a confused mish-mash of different technologies and ad hoc working practices.
The solution: an ITSMSTo avoid this fate, your organisation needs to adopt an IT Service Management System (ITSMS). Employing an ITSMS will enable your organisation to identify how to enhance the quality of service you deliver to your customers. The standard for an ITSMS is ISO/IEC 20000.

ISO/IEC 20000 – The standardThis pocket guide offers an overview of the purpose of the standard and shows how it can be used. Topics covered include qualification programmes, certification schemes and the interrelationship of ISO20000 with other standards, such as ISO27001. The overall emphasis of the guide is… Leer más

Accessible and professional advice on how to implement an ISO14001 environmental management system
In the 21st century, business has to take sustainability seriously. As public opinion becomes increasingly concerned about climate change, governments are imposing ever tighter environmental regulations on both industry and the retail sector. By putting in place an environmental management system (EMS), you can ensure you are disposing of your waste in a responsible manner and making the most efficient use of raw materials. This will help you to lower carbon emissions and keep the negative impact of your business on the environment to a minimum.
 
ISO14001 The International Standard
 
The international standard for an EMS is ISO14001. With an EMS certified to ISO14001, you can improve the safety and efficiency of your business operations, and, at the same time, boost customer confidence and reassure your stakeholders.
 
An invaluable step-by-step guide
 
This pocket guide, intended to help… Leer más

This book considers such change in the modern context of IS/IT being both enablers (and sometimes inhibitors) of business change.
 
IT is often considered to be inextricably linked to business - mostly by IT pundits; the popularity of outsourcing IT and the increasing profile of ‘software as a service’ are proof points that business may not share that point of view. The book, therefore, does not hold IT as an essential partner in business. Instead, it considers first the human capital of change and second the role (or rather the potential role in many instances) that might be played by IT.

Make your SLA work for you … Read this essential guide to SLAs today!
A wide range of industry sectors will outsource service provision (for example, banking, pharmaceuticals, and insurance companies). This can happen where an organisation outsources its IT payroll needs, its helpdesk and IT maintenance requirements, its payment processing, or its whole IT function.
 
The key risk
The key risk for an organisation that enters into an outsourcing transaction, are that the services that it receives from the supplier will be worse than the services they were receiving before, or that the cost savings that were anticipated or promised, are not achieved.
 
The SLA
To try and avoid this scenario, the outsourcing contract should include a Service Level Agreement (SLA). The SLA must be drafted to govern the standard of service that you require, including the cost of those services and the consequences of not achieving pre-agreed standards.
 
 
The wider environment
While Service Level… Leer más

Don’t let an e-mail cause an information security incident at your company – buy this pocket guide today!
Your business relies on e-mail for its everyday dealings with partners, suppliers and customers. While e-mail is an invaluable form of communication, it also represents a potential threat to your information security. E-mail could become the means for criminals to install a virus or malicious software on your computer system and fraudsters will try to use e-mails to obtain sensitive information through phishing scams.
 
Safeguard your company
If you want to safeguard your company’s ability to function, it is essential to have an effective e-mail security policy in place, and to ensure your staff understand the risks associated with e-mail.
 
A comprehensive approach
This pocket guide will help businesses to address the most important issues. Its comprehensive approach covers both the technical and the managerial aspects of the subject, offering valuable insights for IT… Leer más

Reap the rewards of a Green IT Strategy with this essential guide
Climate change can be an emotive issue. This book takes a cool look at the subject and shows you what makes it relevant to your business. A big part of the answer is energy. Computers consume a lot of energy, and energy costs money. The cost of powering and cooling data servers over three years is currently 1.5 times the cost of purchasing the server hardware. Over the next two decades, global demand for energy is predicted to rise by 50%, which means that your long-term energy costs are also likely to increase. In the end, if your organisation’s energy costs are high, it makes sense for you to focus on ways to reduce energy consumption. Improving the efficiency of data centre power supplies and reducing IT power requirements in the office are examples of how Green IT can yield a substantial return on investment.
 
This business guide to Green IT was written to introduce, to a business audience, the opposing groups and the key… Leer más

This is a unique practical digest for managers and professionals who need to know the whole story.
 
It delivers “how to do BCM in the most effective way”, whether to do it and the difference it really makes to corporate governance, corporate social responsibility and directors’ contingent liabilities.
This comprehensive guide deals with all aspects of “best practice” in business resilience, including current issues like choosing software, national and international standards, and even sustainability.

The first glossary to present the full range of terms relating to business continuity
BS25999 is the formal standard for business continuity management. This invaluable pocket guide will help you to understand the language of business continuity. It contains definitions both of the key words in BS25999 and of the relevant terms found in the information security standard, ISO27001. Other definitions provided in the glossary have been taken from the earlier glossaries published by the Business Continuity Institute and the DRI (Institute for Continuity Management), from the IT service management standard, ISO20000, and from the IT Infrastructure Library (ITILv3). Created to facilitate the adoption of BS25999, the combined glossary sets out the most common business continuity terms and offers an authoritative explanation of what they mean. It will therefore enable business continuity to be discussed clearly and consistently throughout the English-speaking world.
 
Benefits to business include:… Leer más

A practical, essential guide to managing change ... How can your organisation manage without it?
Why do organisations change? What are the risks involved? Can we resist change? What is the best way to manage it? What are the key factors that drive change, and how? Why are some changes easier to survive than others?
 
Be fully equipped to manage change
These are just some of the questions that Darren Arcangel and Brian Johnson address in Everything you want to know about Organisational Change. This practical guide recognises that every organisation functions differently, has different goals, and faces different challenges. It will give you the tools you need to understand the factors influencing your organisation, to identify how your business must respond, and to implement the necessary changes. Your organisation will survive and become more efficient.
 
Where does IT fit in?
Given particular consideration is the role of IT in managing change, and the way in which it can be both an enabler… Leer más

Software Life Cycle Management Standards

Coaching helps people to define desired outcomes for themselves and encourages them to take responsibility for developing strategies and actions to achieve them. It’s about helping people to learn rather than teaching them. By applying sound coaching skills within in the IT workplace, you can enhance the quality of your team’s work, increase people’s ability and confidence, and create a climate of high performance.