Business organizations, both public and private, are constantly challenged to innovate and generate real value. CIOs are uniquely well-positioned to seize this opportunity and adopt the role of business transformation partner, helping their organizations to grow and prosper with innovative, IT-enabled products, services and processes. To succeed in this, however, the IT function needs to manage an array of inter-related and inter-dependent disciplines focused on the generation of business value. In response to this need, the Innovation Value Institute, a cross-industry international consortium, developed the IT Capability Maturity FrameworkTM (IT-CMFTM). This second edition of the IT Capability Maturity FrameworkTM (IT-CMFTM) is a comprehensive suite of tried and tested practices, organizational assessment approaches, and improvement roadmaps covering key IT capabilities needed to optimize value and innovation in the IT function and the wider organization. It enables organizations to devise more robust strategies, make better-informed decisions, and perform more effectively, efficiently and consistently. IT-CMF is: • An integrated management toolkit covering 36 key capability management disciplines, with organizational maturity profiles, assessment methods, and improvement roadmaps for each. • A coherent set of concepts and principles, expressed in business language, that can be used to guide discussions on setting goals and evaluating performance. • A unifying (or umbrella) framework that complements other, domain-specific frameworks already in use in the organization, helping to resolve conflicts between them, and filling gaps in their coverage. • Industry/sector and vendor independent. IT-CMF can be used in any organizational context to guide performance improvement. • A rigorously developed approach, underpinned by the principles of Open Innovation and guided by the Design Science Research methodology, synthesizing leading academic research with industry practitioner expertise ‘IT-CMF provides us with a structured and systematic approach to identify the capabilities we need, a way to assess our strengths and weaknesses, and clear pathways to improve our performance.’ Suresh Kumar, Senior Executive Vice President and Chief Information Officer, BNY Mellon ‘To successfully respond to competitive forces, organizations need to continually review and evolve their existing IT practices, processes, and cultural norms across the entire organization. IT-CMF provides a structured framework for them to do that.’ Christian Morales, Corporate Vice President and General Manager EMEA, Intel Corporation ‘We have successfully applied IT-CMF in over 200 assignments for clients. It just works. Or, as our clients confirm, it helps them create more value from IT.’ Ralf Dreischmeier, Senior Partner and Managing Director, The Boston Consulting Group ‘By using IT-CMF, business leaders can make sure that the tremendous potential of information technology is realized in their organizations.’ Professor Philip Nolan, President, Maynooth University ‘I believe IT-CMF to be comprehensive and credible. Using the framework helps organizations to objectively identify and confirm priorities as the basis for driving improvements.’ Dr Colin Ashurst, Senior Lecturer and Director of Innovation, Newcastle University Business School

This management guide offers an introduction to the IT Capability Maturity FrameworkTM (IT-CMFTM), 2nd edition. The IT-CMF offers a comprehensive suite of tried and tested practices, organizational assessment approaches, and improvement roadmaps covering key IT capabilities needed to optimize value and innovation in the IT function and the wider organization. It enables organizations to devise more robust strategies, make better-informed decisions, and perform more effectively, efficiently, and consistently. IT-CMF is: • An integrated management toolkit covering 36 key capability management disciplines, with organizational maturity profiles, assessment methods, and improvement roadmaps for each. • A coherent set of concepts and principles, expressed in business language, that can be used to guide discussions on setting goals and evaluating performance. • A unifying (or umbrella) framework that complements other, domain-specific frameworks already in use in the organization, helping to resolve conflicts between them, and filling gaps in their coverage. • Industry/sector and vendor independent. IT-CMF can be used in any organizational context to guide performance improvement. • A rigorously developed approach, underpinned by the principles of Open Innovation and guided by the Design Science Research methodology, synthesizing leading academic research with industry practitioner expertise ‘IT-CMF provides us with a structured and systematic approach to identify the capabilities we need, a way to assess our strengths and weaknesses, and clear pathways to improve our performance.’ Suresh Kumar, Senior Executive Vice President and Chief Information Officer, BNY Mellon ‘To successfully respond to competitive forces, organizations need to continually review and evolve their existing IT practices, processes, and cultural norms across the entire organization. IT-CMF provides a structured framework for them to do that.’ Christian Morales, Corporate Vice President and General Manager EMEA, Intel Corporation ‘We have successfully applied IT-CMF in over 200 assignments for clients. It just works. Or, as our clients confirm, it helps them create more value from IT.’ Ralf Dreischmeier, Senior Partner and Managing Director, The Boston Consulting Group ‘By using IT-CMF, business leaders can make sure that the tremendous potential of information technology is realized in their organizations.’ Professor Philip Nolan, President, Maynooth University ‘I believe IT-CMF to be comprehensive and credible. Using the framework helps organizations to objectively identify and confirm priorities as the basis for driving improvements.’ Dr Colin Ashurst, Senior Lecturer and Director of Innovation, Newcastle University Business School

Business organizations, both public and private, are constantly challenged to innovate and generate real value. CIOs are uniquely well-positioned to seize this opportunity and adopt the role of business transformation partner, helping their organizations to grow and prosper with innovative, IT-enabled products, services and processes. To succeed in this, however, the IT function needs to manage an array of inter-related and inter-dependent disciplines focused on the generation of business value. In response to this need, the Innovation Value Institute, a cross-industry international consortium, developed the IT Capability Maturity Framework(TM) (IT-CMF(TM)). This second edition of the IT Capability Maturity Framework(TM) (IT-CMF(TM)) is a comprehensive suite of tried and tested practices, organizational assessment approaches, and improvement roadmaps covering key IT capabilities needed to optimize value and innovation in the IT function and the wider organization. It enables organizations to devise more robust strategies, make better-informed decisions, and perform more effectively, efficiently and consistently. IT-CMF is: - An integrated management toolkit covering 36 key capability management disciplines, with organizational maturity profiles, assessment methods, and improvement roadmaps for each. - A coherent set of concepts and principles, expressed in business language, that can be used to guide discussions on setting goals and evaluating performance. - A unifying (or umbrella) framework that complements other, domain-specific frameworks already in use in the organization, helping to resolve conflicts between them, and filling gaps in their coverage. - Industry/sector and vendor independent. IT-CMF can be used in any organizational context to guide performance improvement. - A rigorously developed approach, underpinned by the principles of Open Innovation and guided by the Design Science Research methodology, synthesizing leading academic research with industry practitioner expertise

Candidates for the CISSP-ISSAP professional certification need to not only demonstrate a thorough understanding of the six domains of the ISSAP CBK, but also need to have the ability to apply this in-depth knowledge to develop a detailed security architecture. Supplying an authoritative review of the key concepts and requirements of the ISSAP CBK, the Official (ISC)2® Guide to the ISSAP® CBK®, Second Edition provides the practical understanding required to implement the latest security protocols to improve productivity, profitability, security, and efficiency. Encompassing all of the knowledge elements needed to create secure architectures, the text covers the six domains: Access Control Systems and Methodology, Communications and Network Security, Cryptology, Security Architecture Analysis, BCP/DRP, and Physical Security Considerations. Newly Enhanced Design – This Guide Has It All! Only guide endorsed by (ISC)2 Most up-to-date CISSP-ISSAP CBK Evolving terminology and changing requirements for security professionals Practical examples that illustrate how to apply concepts in real-life situations Chapter outlines and objectives Review questions and answers References to free study resources Read It. Study It. Refer to It Often. Build your knowledge and improve your chance of achieving certification the first time around. Endorsed by (ISC)2 and compiled and reviewed by CISSP-ISSAPs and (ISC)2 members, this book provides unrivaled preparation for the certification exam and is a reference that will serve you well into your career. Earning your ISSAP is a deserving achievement that gives you a competitive advantage and makes you a member of an elite network of professionals worldwide.

Project success is widely covered, and the discourse on project complexity is proliferating. The purpose of this book is to merge and investigate the two concepts within the context of information system (IS) projects and understand the symbiosis between success and complexity in these projects. In this original and innovative research, exploratory modelling is employed to identify the aspects that constitute the success and complexity of projects based on the perceptions of IS project participants. This scholarly book aims at deepening the academic discourse on the relationship between the success and complexity of projects and to guide IS project managers towards improved project performance through the complexity lens. The research methodology stems from the realisation that the complexity of IS projects and its relationship to project success are under-documented. A post positivistic approach is applied in order to accommodate the subjective interpretation of IS-project participants through a quantitative design. The researchers developed an online survey strategy regarding literature concerning the success and complexity of projects. The views of 617 participants are documented. In the book, descriptive statistics and exploratory factor analysis pave the way for identifying the key success and complexity constructs of IS projects. These constructs are used in structural-equation modelling to build various validated and predictive models. Knowledge concerning the success and complexity of projects is mostly generic with little exposure to the field of IS project management. The contribution to current knowledge includes how the success of IS projects should be considered as well as what the complexity constructs of IS projects are. The success of IS projects encompasses strategic success, deliverable success, process success and the ‘unknowns’ of project success. The complexity of IS projects embodies organisational complexity, environmental complexity, technical complexity, dynamics and uncertainty. These constructs of success and complexity are mapped according to their underlying latent relationships to each other. The intended audience of this book is fellow researchers and project and IS specialists, including information technology managers, executives, project managers, project team members, the project management office (PMO), general managers and executives that initiate and conduct project-related work. The work presented in this first edition of the book is original and has not been plagiarised or presented before. It is not a revised version of a thesis or research previously published. Comments resulted from the blind peer review process were carefully considered and incorporated accordingly.

This book constitutes the refereed proceedings of the 17th International Conference on Software Process Improvement and Capability Determination, SPICE 2017, held in Palma de Mallorca, Spain, in October 2017. The 34 full papers presented together with 4 short papers were carefully reviewed and selected from 65 submissions. The papers are organized in the following topical sections: SPI in agile approaches; SPI in small settings; SPI and assessment; SPI and models; SPI and functional safety; SPI in various settings; SPI and gamification; SPI case studies; strategic and knowledge issues in SPI; education issues in SPI.