Who is it for?

IT managers responsible for managing different segments of IT in an organisation, IT auditors and board members responsible for IT. Everyone else who is interested in gaining an understanding of the best practices of managing and controlling IT in an organisation.

What's in it for me and my business?

You will build understanding of how to plan, manage and control IT in an organisation. You will become aware of major risks and security issues in IT areas and the ways in which these risks can be overcome by implementing controls in line with best practices.

What will I be able to do after I receive training?

You will be able to:

• Prepare your company’s high-level plan for IT for the next period
• Follow best practices in setting up your IT department
• Understand how IT should report to the management of the company and prepare an IT report
• Understand how IT and business should work together
• Understand the main risks related to IT and plan mitigating actions

What will I do and experience during the training?

You will:

• Get common guidelines and examples for proper IT Management (plan, budget, roles and responsibilities, etc.) as part of overall management of the company
• Obtain different solutions for IT policies and procedures definitions
• Learn how to evaluate objectives and risks for each of the four domains of IT activities (program development, program changes, computer operations, access to programs and data with focus on logical and physical security). Become familiar with controls which mitigate identified risks.
• Meet and discuss with security awareness specialists different solutions for the most common security issues.
• Get acquainted with the most common issues related to IT in companies and banks and ways of their resolution from experienced IT auditors.

Duration

The course lasts two days. During the first day IT Managers and board members in charge of IT will be acquainted with the topics related to links between IT and business.

The second day is more practical and focused on the most common issues in companies and banks and discussion about the different approaches and means for issue resolution.