IT Decision Paper

Part One

1. Business Statement-

a. GG Freightways (GGFRT) is a shipping and delivery business organization and has been operation for over 3 decades. The base of operations has been in the major cities of the southwestern region of the United States. The companies headquarter is situated in Los Angeles, California.

b. In total, the company has 8 terminals in the following areas; Los Angeles CA, San Diego CA, San Bernardino CA, Bakersfield CA, Scottsdale AZ, Phoenix AZ, Tucson AZ, and Las Vegas NV. Additionally, it has two maintenance facilities in San Bernardino CA and Scottsdale AZ.

c. On the other hand, it has a fleet section comprising of the following; 400 delivery vehicles (average of 50 per terminal) which include: 80 tractor/semi-trailer units, 160 box trucks and 160 panel vans.

d. Financial posture of the company indicate a total annual revenue of an estimated $35,000,000 while the current economic climate is noted to be stable while at the same time being highly competitive. Meanwhile, 8% represents the future financial profit goals with 8% in cost-saving.

2. Business Strategic Objectives- The company management team has identified three new strategic objectives namely as freight tracking, coordination of operations, warehousing services and collaborations. GFRT want to introduce freight tracking so as to provide accurate delivery times, coordinate truck movements, and warehouse or storage as a service as well as to improve efficiency and service delivery through collaborations with other organizations in the industry (Hampton, 2015). 

3. IT Mission and IT Vision Statements

a. IT Mission Statement- We are here to attain better efficiency in cargo transportation and help our clients to achieve their goals in a strategic manner. We do that by ensuring all strategic maneuvers are performed in a manner that benefits both the company and our esteemed customers. Definitely, prioritizing on technology that enhance collaborations and delivering quality freight services are of great importance to the company.

b. IT Vision Statement- To inspire the future by becoming the world’s most innovative, efficient, desired and profitable freight company.

4. Governance-

a) The participants who be involved in the development of the desired and most appropriate governance plan include the Chief Executive Officer, Chief Financial Officer, system and network administrators, members of third-party service providers, volunteering customers, system users, enterprise-based IT system developers, and external IT security experts (Williams, 2016). 

b) The governance body will include the chief information officer, IT security administrators, and IT security advisors or experts. The chief information officer will be responsible for resource allocation, ownership of the entire security plan, coordination of tasks, and effective management of all employees in the department, and enforcing policies. On the other hand, IT security administrators will be delegated with deployment of all security tools and practices, monitoring current activities, risk management, allocating roles and access rights, and reporting deficits or violations. Finally, the IT security consultants will be utilize for advisory roles and coordination of compliance requirements as well as conducting impartial audits.

c) NIST SP 800-53 is the specific governance methodology that should be established in the organization because it presents the organizations well-defined framework for developing IT management guidelines, security and privacy policies, audits, risk management, enforcement, forensic efforts, and financial audit and reporting requirements (Williams, 2016). 

d) The responsibilities of the governance body include approving and validating the established IT management guidelines, setting up the baseline code of conduct and acceptable/unacceptable behavior components, conducting audits and risk assessments, enforcing and sanctioning, and reporting discrepancies or malicious activities.

e) Prioritization of IT projects will depend on how they enhance efficiency and effectiveness of the organization’s operations. For instance, mobile application system is vital in enhancing access to information and resources will on the go and it has to be highly prioritized. However, projects that will improve IT security are to be prioritized highly in order to avert security incidences (Williams, 2016). 

5. Inventory of current IT systems- GGFRT is current technology products for finance and accounting reporting systems, fleet management system, mobile application system, and route and freight tracking system. They are utilized in the organization to coordinate information and resources as well as underway and scheduled operations.

References

Hampton, J. J. (2015). Fundamentals of enterprise risk management: How top companies assess risk, manage exposure, and seize opportunity.

Silbey, S. S., & American Academy of Political and Social Science. (2015).Organizational challenges to regulatory enforcement and compliance: A new common sense about regulation. Los Angeles: SAGE.

Top of Form

Williams, B. L. (2016). Information security policy development for compliance: ISO/IEC 27001, NIST SP 800-53, HIPAA standard, PCI DSS V2. Boca Raton, FL: CRC Press.