We should mean almost, digitally. With serious considerations to best practices, widely acceptable principles including that of, directly and indirectly related, applicable laws and, if any, for the sake of thoughtful and sensible transparency. Almost everything, in this case is about, as nations and industries are already taking it as an initiative to protect entities such as people, enterprises, assets, properties including but not limited to information, which is the sole subject of information security specialists but it's reality is more complicated than arguing on which security can cover which area. Technology practitioners should appreciate it. Those who goes beyond a few specializations could realized it and make an effective position paramount to a cybersecurity responsibility. And the size of that responsibility may mean breaking and delegating it with various roles, with those who are effective and prudent in their jobs.
A small and purely a consultancy firm (registered in Philippines), StrateGICT Company, says, the high level principles-based advisory standard, the Corporate Governance of Information (and Communications) Technology or the so-called ISO/IEC 38500 have taken its own place, along the many and earliest IT management systems e.g. ITIL, ISMS, QMS, et al, as a valuable resource particularly developed to aid, however not limited to, business owners and directors to achieve the paragon of, no matter how small or big the organization is, including how they can understand and coherently extend and discharge duties on, their strive in IT.
According to the standard, it must be effective, efficient and acceptable. Where each of the six principles namely:
1. Responsibility;
2. Strategy;
3. Acquisition;
4. Performance;
5. Conformance; and
6. Human behaviour;
in conjunction of their use of IT, should be evaluated, directed and monitored.
According to the standard, it must be effective, efficient and acceptable. Where each of the six principles namely:
1. Responsibility;
2. Strategy;
3. Acquisition;
4. Performance;
5. Conformance; and
6. Human behaviour;
in conjunction of their use of IT, should be evaluated, directed and monitored.
Comments