Organizations are under a lot of pressure to attain goals set forth by their various stakeholders. To this end, IT must grapple not only with advancing productivity but with the safeguarding of value as well. To accomplish this effectively and efficiently requires a review of how the business and IT interact plus how IT operates. This class will provide an overview of some of the considerations that organizations must take into account. The class will include:

• An introduction as to how goals and objectives should be linked to establish causality.
• Basic risk management concepts including a multivariate math model for risk ranking
• An overview of what IT controls are and how risks drive the selection of controls
• An introduction of how to integrate best practices with control frameworks with an emphasis on the IT Infrastructure Library (ITIL).
• A review of how Sarbanes-Oxley affected US public companies' IT organizations and how lessons learned might apply to India's Clause 49.