|
|
 |
|
Viewing report
|
|
|
|
Advisory Note: Making the Most of the Convergence of IT Risk and Operations Management
Enterprise Management Associates, June 2007, Pages: 3
IT spending is a constant, essential to keeping up with a pace of change that determines competitive advantage in today’s technology-dependent world. Yet the security and compliance spend is dictated, not by strategic business priorities, but by external demands—and the investment is constant, since the risk posture changes continually. How can the enterprise balance its investment in managing these risks with the need to preserve resources essential to maintaining competitive advantage? The key is in recognizing management tools that deliver value in meeting all these challenges—defending against multiple risks while assuring competitive and reliable IT. In this Advisory Note, EMA Senior Security and Risk Management Analyst Scott Crawford looks at vendors and solutions that extend these values across multiple domains today, and will expand the convergence of these values in the future.
IT is a domain where spending is a constant, essential to keeping up with a pace of change that determines competitive advantage for virtually every aspect of business in today’s technology-dependent world. Within IT, this pace is arguably the most demanding in security, because it is set not by the business or its suppliers, but by threats—both outside and inside the business. With each new wave of threat, the market produces a new class of security tools that businesses feel they must have in order to be safe. This leads to an 'arms race' where the enterprise must weigh its expenditures for defense against strategic priorities essential to maintaining a competitive edge.
Regulatory compliance is another area of IT spend where the agenda is set by outside influences. The compliance investment is dictated not by strategic business priorities, but by public or industry policy mandates. The challenge of compliance is exacerbated by the multiple, complex, and often confusing array of rules to which the business must adhere, from corporate governance to privacy to industry-specific standards.
In each of these cases—security, regulatory compliance, IT governance—the investment is not optional. Without it, breaches and resulting damages or penalties may threaten the viability of the business itself. How can the enterprise balance its investment in managing these risks with the need to preserve resources essential to maintaining competitive advantage?
Product samples
A sample for this product is available. Please Login/Register to download this sample.
|
|
|
|
