Compliance by Design: It Controls That Work

Compliance by Design: IT controls that work, brings a refreshing perspective (and language) to the rather mundane world of IT controls and compliance. Unlike your typical audit/compliance textbooks that can be dry, idealistic or prescriptive in tone, this book is written in a fun, accessible prose yet not afraid to tackle grey areas. Moving away from traditional efforts Traditional efforts in attaining or sustaining IT compliance employ an outside-looking-in approach characterized by capturing varied compliance requirements and/or frameworks and applying these within the organization. This book advocates an inside-looking-out approach emphasizing fundamental ideas of good control design as the basis for developing effective and sustainable IT compliance strategies. Tools and techniques Intended to arm you with the tools and techniques to put in place the right system of internal controls, the focus is on IT controls, but with plenty of references to business and entity controls too.