Information security issues impact all organizations, however measures used to implement effective measures are often viewed as a businesses barrier costing a great deal of money. This practical title clearly explains the approaches that most organizations can consider and implement which helps turn Information Security management into an approachable, effective and well-understood tool.

It covers

The quality requirements an organization may have for information
The risks associated with these quality requirements
The countermeasures that are necessary to mitigate these risks
Ensuring business continuity in the event of a disaster
When and whether to report incidents outside the organiza ...

This publication covers the most important frameworks in use for quality management in IT organizations. A consistent approach to each chapter allows easy comparison between the frameworks; a short profile, a description and core graphics, and the relevance to IT management are provided for each framework.


The frameworks are categorized according to their main goal, and each framework is plotted against the largest and broadest ‘umbrella’ framework available, the 3x3 matrix for Information Management. This categorization should support the reader in finding the most suitable frameworks for their situation.



This pocket guide is used as a first introduction to frameworks you have not seen befor ...

This is the Official Hardcopy publication of The Open Group Architecture Framework

This is a companion document to the TOGAF 9 Foundation Study Guide and provides an overview of every learning objective for the TOGAF 9 Certified Syllabus beyond TOGAF 9 Foundation. It is specifically designed to help individuals prepare for the TOGAF 9 Part 2 Examination or Section 2 of the TOGAF 8 – 9 Advanced Bridge Examination, leading to TOGAF 9 Certified.

The purpose of certification to TOGAF 9 Certified is to provide validation that, in addition to the knowledge and comprehension of TOGAF 9 Foundation, the Candidate is able to analyze and apply this knowledge. The learning objectives at this level therefore focus on applicat ...

This groundbreaking new title looks at Information Security from defining what security measures positively support the business, to implementation to maintaining the required level and anticipating required changes. It covers:

Fundamentals of information security – providing readers insight and give background about what is going to be managed. Topics covered include: types of security controls, business benefits and the perspectives of business, customers, partners, service providers, and auditors.
Fundamentals of management of information security - explains what information security management is about and its objectives. Details are also given on implementing the process and the continuous effort required to mainta ...

This title covers all the processes for managing the contract, from the transition phase through to normal operational service and contract termination.


Developed for IT practitioners as well as commercial and contract managers, this expert guide provides practical and concise advice on best practices in:


Key Features:

Good contract development as the foundation for contract management (especially service quality, performance measurement and communications)
An appropriate governance framework
Selecting the right individuals, with appropriate authority in key roles
The appropriate use of external expert advice
Continuity of people involved in the contract, right fr ...

The purpose of this book is to provide guidance to the readers to gain a basic understanding of the PRINCE2® method and to pass the PRINCE2® Foundation exam. The content of this book is based on the official manual Managing Successful Projects with PRINCE2® - 2009 Edition. For the exam specifications this book is based on the PRINCE2 2009 - Syllabus V1.1. Additionally the PRINCE2 Foundation exam - Candidate Guidance V1.2 has been used. The first part of this book describes the performance definition of a Foundation candidate and the examination format from the exam syllabus. Thereafter all fifteen syllabus areas are described per learning objective. As appendices a glossary of PRINCE2 terms, an examination guidance, a multiple choice answer ...

There are many publications on PRINCE2. Most of these publications describe the theory of PRINCE2. This book, based on PRINCE2 2009 edition, however deals with a practical approach for formal reports: how can be achieved that PRINCE2 works better in practice? The existing PRINCE2 report templates cannot be used easily.

Of course the process approach in PRINCE2 remains viable, but in this book the PRINCE2 documents are the key. The reader gets a practical help for implementing PRINCE2. This helps project managers and project executives to manage and control in an efficient manner.

Target Groups

This book is meant for everyone who has anything to do with project management. It is intended for:

It is now accepted that IT functions are a fundamental part of the competitive business model. Instead of simply offering services IT must ‘create value’ for the business. This practical title describes the strong financial skills that IT managers must have in order to support:

Operations: Finance departments rely heavily on IT managers being able to identify, track and measure costs – sometimes at a very granular level
Budgeting: the very technical nature of IT operations means that budgeting can be more complex than many other areas
Project Delivery: large technical project deliveries means that costs can be correspondingly complex to account for
Business Modeling; pricing models rely heavily on IT managers ...

The issues, opportunities and challenges of aligning information technology more closely with an organization and effectively governing an organization’s Information Technology (IT) investments, resources, major initiatives and superior uninterrupted service is becoming a major concern of the Board and executive management in enterprises on a global basis. An integrated and comprehensive approach to the alignment, planning, execution and governance of IT and its resources has become critical to more effectively align, integrate, invest, measure, deploy, service and sustain the strategic and tactical direction and value proposition of IT in support of organizations.

Much has been written and documented about the individual comp ...

Using TIPA to Assess and Improve your Processes with ISO 15504 and Prepare for ISO 20000 Certification

The key to any successful IT Service Management solution are strong, clear processes that are fit for purpose. The continual cycle of service improvements must therefore look at the existing processes and assess how effective they are within changing business requirements.

This innovative title not only looks at this fundamental process assessment, it does it using the key ISO/IEC standard in this area. In brief, this title explains the meeting between two standards:

ITIL: the de facto standard in IT Service Management
ISO/IEC 15504 Information technology - Process assessment
Readers c ...