IT Controls Management


Failed to execute the [bmc-contextid] macro. Cause: [Missing macro content: this macro requires content (a body)]. Click on this message for details.

The macro unmigrated-inline-wiki-markup from Confluence is no longer available.

provides a systematic approach to IT governance and compliance management. Then your IT organization can create or adopt IT governance frameworks to structure, manage, and maintain the processes and activities required for meeting any governance and compliance objective.

The macro unmigrated-inline-wiki-markup from Confluence is no longer available.

permits you to leverage preconfigured industry-standard governance frameworks, such as CobiT and ITIL, in conjunction with in-house standards and best practices to create the governance framework that best meets the needs of your IT organization.

The macro unmigrated-inline-wiki-markup from Confluence is no longer available.

provides functionality that maps directly to every aspect of the compliance lifecycle, while establishing a roadmap for long-term IT effectiveness. The following chart illustrates the suggested management structure for approaching governance and compliance challenges.

The macro unmigrated-inline-wiki-markup from Confluence is no longer available.


IT governance objectives drive the process. The BMC IT Business Management Foundation provides a repository for business processes and IT processes. 

The macro unmigrated-inline-wiki-markup from Confluence is no longer available.

 provides places for creating catalogs of risks and the controls to mitigate those risks. The relationships that you create through the 

The macro unmigrated-inline-wiki-markup from Confluence is no longer available.

 provide the visibility that enables you to know with confidence the status of your governance and compliance activities.

The macro unmigrated-inline-wiki-markup from Confluence is no longer available.

assists your IT organization with the transition from task orientation to process orientation. Your IT organization can architect its own approach, using a procedure similar to the following one:

  1. Capture and document all the IT processes, including the risks related to those processes and the controls that mitigate the risks.
  2. Create governance objectives that include all the associated enterprise processes, IT processes, risks, and controls.
  3. Create control assessments that permit the IT organization to document and test the effectiveness of the IT processes in meeting the requirements of any governance objective.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*