COMPLIANCE COUNSELOR
IT Infrastructure Library: Regulatory compliance benefits and training options
Ed Tittel
09.26.2006
Rating: -1.00- (out of 5)
|
Companies required to comply with government mandates and regulations, such as Sarbanes-Oxley and HIPAA can benefit from learning about and implementing the European standards initiative IT Infrastructure Library (ITIL). ITIL defines a coherent set of best practices for IT services management and delivery. It rests on standards originally defined by the British Standards Institution (BS15000) and elaborated through the IT Service Management Forum (itSMF).
The IT services management principles and practices that ITIL prescribes can help facilitate regulatory compliance. In particular, ITIL practices related to configuration items and a configuration management database (CMDB) can help organizations work toward Sarbanes-Oxley compliance (which requires a complete accounting for IT assets and processes). Working toward the kind of comprehensive IT governance to which ITIL implementation leads helps to lay the groundwork for compliance with any regulation. Also, when used with COBIT, experts cite ITIL as a useful means to meet business challenges.
ITIL training options
ITIL itself offers a large collection of publications and official training, but a considerable aftermarket is also hard at work to provide training, study guides, publications and best practices information. To help organizations make sure that their staff is sufficiently versed in and knowledgeable about ITIL principles, practices and processes, it's possible to earn a whole series of certificates related to this program. These are listed next, but those of most interest to security practitioners are the ITIL Foundation and Practitioner credentials.
Companies as varied as Knowledge United, IBM Global Service
To continue reading for free, register below or login
To read more you must become a member of SearchSecurity.com
s, HP and Fox IT Training all stand ready not just to help organizations get their IT staff trained on ITIL topics, but to help shepherd them through the certification process, and even to build customized in-house training programs where appropriate. Indeed the formal ITIL Qualification Scheme, designed to permit companies and organizations to certify their proper adoption and use of ITIL practices and processes, has become an important benchmark nowadays, in much the same way that ISO 9000 and formal quality assurance processes predominated in the 1990s business landscape.
Given a large number of offerings and learning opportunities, does pursuing ITIL compliance through training or certification makes sense? Yes, it does. Recent studies from the IT Process Institute show that formalizing IT processes and practices within compliance and best practices frameworks can boost productivity and ROI significantly — sometimes by as much as 30-35% — simply by virtue of creating formal structures and measurement mechanisms where none existed before. It's not often that doing what's required by law turns out to be good for businesses and organizations, but those that seize the opportunity to rethink their infrastructure and IT operations while working toward compliance may discover that the paybacks involved amount to something more than a sense of accomplishment, or of doing the right thing.
About the author
Ed Tittel is a freelance writer who specializes in information security, IT certification, and markup lanaguages. He created the Exam Cram series, has contributed to over 130 computer books and writes regularly for numerous TechTarget Web sites. E-mail Ed at etittel@yahoo.com.
|
|
Rate this Tip
|
To rate tips, you must be a member of SearchSecurity.com.
Register now
to start rating these tips. Log in if you are already a member.
|
|
|
BROWSE BY TAG
Compliance Counselor,
Information Security Threats,
Identity Theft and Data Security Breaches,
Standards,
Compliance,
Enterprise Data Protection,
Identity Theft and Data Security Breaches,
Information Security Jobs and Training,
Information Security Careers, Training and Certifications, VIEW ALL TAGS
|
|
DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.
|
|
|
|
|
|
|
