|
|
|
How to deal with standards |
 |
 |
 |
|
Written by Administrator
|
|
Thursday, 02 September 2010 08:33 |
|
Here are some useful hints how standards should be used in any organization
- Always find out from where the standard originates and through which stages of development it went
- Use them as frameworks (e.g. like Cobit) only, never apply them "as is"
- The closer they are to technology, the more value they can deliver
- Define the maturity level of the domain you want to use the standard for before applying the standard. The biggest deficit of a standard is it's inability to address business specific requirements -- (.. yep, this is the nature of a standard..)
- Don't try to get a certification unless you can really identify the benefits
By the time you've gone through all this, you should know what to do!
|
|
Written by Administrator
|
|
Thursday, 26 August 2010 08:29 |
|
The FSA (UK regulator) published that Zurich Insurance UK was fined "for failing to have adequate systems and controls in place to prevent the loss of customers’ confidential information." A tape was lost in transit, but only detected one year later. Luckily it was a tape - but how much data gets "lost" because of unauthorized access? Would a good monitoring scheme have helped -certainly! Again, its not about prevention, it's about monitoring. |
|
Last Updated on Thursday, 26 August 2010 08:40 |
|
|
Are standards useful/less? |
|
|
|
|
Written by Administrator
|
|
Sunday, 29 August 2010 07:59 |
|
Are standards useful or just a nuisance? Participate in a discussion started in the AIIM ERM community. |
|
Last Updated on Sunday, 29 August 2010 08:03 |
|
Risk Management Contest ended! |
|
|
|
|
Written by Administrator
|
|
Monday, 23 August 2010 07:43 |
|
Can you find out where the following statement is coming from? You will be surprised!
"You think you can assign a probability metric to future events? For technical reasons we do that all the time. But it's bullshit - nothing more than a convention, an accounting conceit. Risk suggests measurable probability. Uncertainty is when likelihood of future events is simply incalculable. Uncertainty is when you don't even know what you don't know. Uncertainty is humility in the presence of ignorance." (end cit.)
|
|
Last Updated on Thursday, 02 September 2010 08:41 |
|
|
|
|
|
|
Page 1 of 7 |
