Audit


Are you paying too much or too little to your information technology staff? Are you earning what you're worth? Whether employer or employee, it is important to know what other companies are paying in total compensation for a similar position in your area. Learn how your company compares in the area of compensation. More...

Job Descriptions

 

The IT job descriptions contained within the Internet and Information Technology Position Descriptions HandiGuide® were completed in 2009 and contains over 600 pages; which includes sample organization charts, a job progression matrix, and over 220 job descriptions. More..

Change Management

 

With the explosion of technology into every facet of the day-to-day business environment there is a need to define an effective infrastructure to support operating environment; have a strategy for the deployment and technology; and clearly define responsibilities and accountabilities for the use and application of technology. More...

Hiring Kit

 

Building the IT Staff your company needs to succeed requires offering the right jobs at the right salary levels. Only the IT Hiring Resource Kit provides the industry-standard job descriptions and up-to-date salary data you need to recruit top talent as effectively and efficiently as possible. More..

Newsletter HomePrior Newsletter


Cloud Complicates Disaster Planning

Most Cloud Services are "as is"

OutsourcingThe typical cloud computing contract can look downright simple to an experienced IT outsourcing customer accustomed to inking pacts hundreds of pages long that outline service levels and penalties, pricing and benchmarks, processes and procedures, security and business continuity requirements, and clauses delineating the rights and responsibilities of the IT services supplier and customer.

And that simplicity, say IT outsourcing experts, is the problem with cloud computing. Failure to understand the true meaning of the cloud and to address the serious legal and contractual issues associated with cloud computing can be catastrophic. The data security issues and business continuity issues are particularly challenging, and failure to address them in the contract can expose a customer to serious business interruption and violation of mandated security requirements.

If a cloud services contract (whether it's for software, infrastructure, or platform-as a service) seems less complex, that's because it's designed to offer products and services "as is"--without any vendor representations or warranties, responsibility for adequate security or data protection, or liability for damages.

Read on....       Order Now... 


Disaster Planning Best Practices

Without a good Disaster Plan Business Continuity is at risk

Security Audit ProgramPlanning for a disaster is a difficult task at best. A major provider of disaster recovery   services, lists hardware problems as the number one cause of disaster, followed   by power outages, hurricanes and floods. CIOs often ask "What scenarios should we prepare for" and "How likely is it that it will happen to us" When one thinks of disasters, big events such as Hurricane Katrina or 9/11 are the first come to mind. But if we look at the ultimate consequence of a disaster - downtime - we can see that any event, large or small, can have the same effect on IT infrastructure.

Disaster recovery and business continuity best practices are well documented in the Disaster Recovery Business Continuity Planning Template.  The top 7 best practices are:

  • Focus on operations
  • Train everyone on how to execute the DRP and BCP
  • Have a clear definition for declaring when a disaster or business interruption occurs that will set the DRP and BCP process into motion -
  • Integrate DRP and BCP with change management
  • Focus on addressing issues BEFORE they impact the enterprise
  • Validate that all technology is properly installed and configured right from the start
  • Monitor the processes and people to know what critical

Read On     Download Sample       Order Now


BIA

Risk Assessment Business IT Impact

The Business Impact Analysis (BIA) is the backbone of the entire business continuity exercise. Even so, it cannot stand alone and without full support, approval and backing from the highest level of management, the exercise will not achieve its full potential. A well-executed BIA can make the difference between a fully developed, robust business continuity plan, and a mediocre one.

Read on...


Security Policies

 

Security Policy

 

Security Manual for the Internet and Information Technology is over 240 pages in length.  The template is compliant with ISO 27000 (formerly ISO 17799), Sarbanes-Oxley, Patriot Act and HIPAA and includes a PCI DSS Audit program.

Read On...