There are two different, interdependent components of IT that are important to a CIO: strategy, which is long-term; and tactical and operational concerns, which are short-term. Based on this distinction and its repercussions, this book clearly separates strategy from day-to-day operations and projects from operations – the two most important functions of a CIO. It starts by discussing the ideal organization of an IT department and the rationale behind it, and then goes on to debate the most pressing need – managing operations. It also explains some best industry standards and their practical implementation, and discusses project management, again highlighting the differences between the methodologies used in projects and those used in operations. A special chapter is devoted to the cutover of projects into operations, a critical aspect seldom discussed in detail. Other chapters touch on the management of IT portfolios, project governance, as well as agile project methodology, how it differs from the waterfall methodology, and when it is convenient to apply each. Taking the fundamental principles of IT service management and best practices in project management, the book offers a single, seamless reference for IT managers and professionals. It is highly practical, explaining how to apply these principles based on the author’s extensive experience in industry.

Using the factor analysis of information risk (FAIR) methodology developed over ten years and adopted by corporations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk. - Uses factor analysis of information risk (FAIR) as a methodology for measuring and managing risk in any organization. - Carefully balances theory with practical applicability and relevant stories of successful implementation. - Includes examples from a wide variety of businesses and situations presented in an accessible writing style.

What makes information useful? This seemingly simple and yet intriguing and complicated question is discussed in this book. It examines ways in which the quality of information can be improved in knowledge-intensive processes (such as on-line communication, strategy, product development, or consulting). Based on existing information quality literature, the book proposes a conceptual framework to manage information quality for knowledge-based content. It presents four proven principles to apply the framework to a variety of information products. Five in-depth company case studies show how information quality can be managed systematically. The book uses frequent diagrams and tables, as well as diagnostic questions and summary boxes to make its content actionable.

Provides a proven implementation framework for companies of all sizes which demonstrates the strategic and financial aspects of information technology. Explains how information systems can be used for strategic purposes in addition to technological ones such as data processing. Features a significant amount of examples and case studies of successful and unsuccessful information management tactics. Illustrates how companies can effectively use the data that information systems provide.

Managing Information Security offers focused coverage of how to protect mission critical systems, and how to deploy security management systems, IT security, ID management, intrusion detection and prevention systems, computer forensics, network forensics, firewalls, penetration testing, vulnerability assessment, and more. It offers in-depth coverage of the current technology and practice as it relates to information security management solutions. Individual chapters are authored by leading experts in the field and address the immediate and long-term challenges in the authors' respective areas of expertise. - Chapters contributed by leaders in the field covering foundational and practical aspects of information security management, allowing the reader to develop a new level of technical expertise found nowhere else - Comprehensive coverage by leading experts allows the reader to put current technologies to work - Presents methods of analysis and problem solving techniques, enhancing the reader's grasp of the material and ability to implement practical solutions