Management of Information Systems

BA 602 Management of Information Systems

Group Assignment: Developing IT Compliance Program [Onsite Activity]

The IT compliance program cannot be conceived in isolation and devoid of the key links to non-IT and financial compliance. Effective IT compliance requires an aggregate vision and architecture to achieve compliance that goes beyond becoming infatuated with a given control framework.

As a group, provide a detailed plan of action based on life cycle concepts to develop and deploy an ongoing IT compliance process. Your plan should provide practical knowledge on what you should consider when developing and implementing an IT compliance program for key regulations such as Sarbanes- Oxley, HIPAA, Gramm-Leach-Bliley, PCI and others to achieve meaningful IT governance.

Your plan should include the following:

• Discuss the challenges IT divisions face in achieving regulatory compliance. • Assess how IT governance will improve the effectiveness of the IT Division to

attain regulatory compliance. • Develop a broad vision, an architecture, and a detailed plan of action that follows

a life cycle concept. • Assess all key business processes and IT compliance factors and link to all

business processes (financial and non-IT) to develop an aggregate vision of IT compliance.

• Your detailed plan should include the following phases: initiate, plan, develop and implement.

Deliverables:

1. Start and complete an outline of your group project. (25 Points) In your outline, provide detailed information on how you plan to complete the project including responsibilities assigned to each group member. Use Power Point with 8 to 10 slides. (40 points)

2. Combine the contributions from each member and produce a final unified

and comprehensive document with 10 to 15 pages. Use Microsoft Word only. (100 points)

Format: Please use APA throughout. Review your APA for additional help on formatting, in- text citations, referencing, etc.

Special Note: Your professor may modify the due dates for Group assignment and

Group presentation based on your required residency date. If your residency falls in

week 2, Group activities will be completed at the residency in week 2. If your

residency is falls in week 1, your professor will modify the due dates Group

assignment and presentation will be completed at the residency in week 1.