1. Models
1.1. ISO / IEC 27002:2005
1.2. ITIL
1.3. CMMI
1.4. PRINCE2
1.5. COBIT
1.5.1. Plan & Organize
1.5.2. Acquire & Implement
1.5.3. Deliver & Support
1.5.4. Monitor & Evaluate
2. Attestation
2.1. Business drivers: Assurance to
2.1.1. regulatory compliance
2.1.1.1. SOX
2.1.1.2. WBP (Privacy law)
2.1.1.3. Wft (Financial Supervision Act)
2.1.1.4. Basel II
2.1.1.5. Solvency II
2.1.2. organizational compliance
2.1.2.1. Corporate Governance codes
2.1.2.1.1. Tabaksblat code
2.1.3. commercial compliance
2.1.3.1. Commercial business arrangements (e.g. contracts and SLAs)
2.2. Main Components
2.2.1. Objective
2.2.1.1. fixed
2.2.1.2. specific
2.2.1.2.1. control objectives related to compliance, accordance and/or conformance
2.2.1.3. assessing design, existence and operating effectiveness of controls
2.2.2. Scope
2.2.3. Control Framework
2.2.3.1. COBIT
2.2.4. Report Structure
2.2.4.1. SAS 70 (Type I and Type II)
2.3. Arguments for justification
2.3.1. top executives focus on effective implementation
2.3.2. contribution to improved control awareness and quality within organisations
2.3.3. reflection of best practices
3. Market developments that have impact on attestation
3.1. ISO / IEC 38500: New worldwide IT governance standard
3.2. ISAE 3402: International assurance report standard
4. Definitions
4.1. Decision & Accountability Perspective
4.1.1. IT decision domains
4.1.2. IT governance archetypes
4.1.3. Implementation mechanisms
4.2. Current & Future use of IT Perspective
4.2.1. IT responsibilities
4.2.2. IT plan
4.2.3. IT in business processes & requirements
4.2.4. IT processes
4.2.5. IT compliance with rules & legislation
4.2.6. Use of human factors
4.3. Effective directing & controlling IT (ITGI) Perspective
4.3.1. Strategic alignment
4.3.2. Value delivery
4.3.3. Risk management
4.3.4. Resource management
4.3.5. Performance measurement
5. Audits
5.1. Goal
5.1.1. proving an adequate and appropriate level of IT governance necessary for compliance, accordance and conformance purposes in a controllable and verifiable fashion
5.2. Objective
5.3. Scope
5.4. Control Framework
5.4.1. General (Organisation's norm / IT strategy)
5.4.2. Support & Maintenance (ITIL)
5.4.3. Security (ISO 27001 and professionals norms)