Praise for IT Compliance and Controls
"James DeLuccia outlines a comprehensive, integrated strategy for achieving regulatory and legislative compliance. This approach is vastly superior, both in scalability and in sustainability, to the siloed compliance strategies that are often seen."
—Dr. Richard Reiner, founder, Assurent Secure Technologies
"Deluccia's book is a great primer and must-read for executives who deal with risk on a day-to-day basis. It masterfully combines the tactical nuts and bolts with the breadth of strategy that all executives must understand in dealing with mitigating risk within the walls of Information Technology in today's global economy. This book offers a structured architectural approach, a 'blueprint in effect,' for new and seasoned executives and business professionals alike to understand the world of compliance — from the perspective of what the problems are, where they come from, and how to position your company to deal with them today and into the future."
—Salil J. Kulkarni, Chief Operating and Information Officer, IVOX Corporation, and former Chief Information Officer, John H. Harland Company
Throughout IT Compliance and Controls, managers and directors charged with supporting environments will discover a refined list of business best practice controls that are explicitly written to ensure they meet the regulations in today's environment, including:
The opportunities and challenges of operating in a global environment
How technology enables the world market
Importance of IT controls
Reality and risks to IT controls being effective
Enterprise risk analysis
Access and authorization
Building a system of IT compliance and controls
This meticulously detailed reference includes materials supported by matrices that map controls to specific regulations and checklists, helping you assess the controls in your own organization.
Reach the highest levels of control and ROI with the best practices found in IT Compliance and Controls.
About the Author
James J. DeLuccia IV, CIA, CISA, CISSP, enables organizations to leverage information, technology, and control environments to create competitive advantage and optimize business performance. A recognized expert on risk management, security, and compliance, he provides assurance and advisory services to companies worldwide. DeLuccia, an architect and contributor for international standards and frameworks, provides regular contributions to the PCI and compliance body of knowledge. He holds dual bachelor degrees in information systems and risk management, and an MBA in finance.