Overview

Information and computer resources are vital assets for organizations. Information resources include all data and software, whether internally or externally developed or acquired from outside sources and regardless of its format whether it be magnetic media, terminal display, or other format. Computer resources include devices and systems used to process and maintain information. Prudent measures must be used to protect these assets against accidental or intentional damage, modification, destruction or unauthorized disclosure, as well as to assure data integrity, confidentiality, and availability.

IT Governance Documentation

Plexeon develops the necessary IT Governance and Information Security Policy Documentation that governs an organization’s Processes and access to its assets. The Information Program and associated policies, standards, guidelines, and procedures applies to all employees, contractors, volunteers and those employed by others to perform work on your premises or who have been granted access to your information systems.

By adopting an effective strategy towards IT Governance, executives and staff are able to more effectively manage and respond enterprise risk. Plexeon’s approach integrates IT governance, risk/compliance management, and performance management yielding a competitive advantage.

A brief list of examples Policies and Procedures include:

• Asset ID and Classification
• Information Security Policy
• Information Security Coordination Policy
• Physical Access Control Policy
• Asset management Policy
• Acceptable Use Policy
• Security Awareness Policy

Sample Data Availability Classifications:

Availability Classification	Description	Potential Loss or Impact
High	High to continuous availability of the data is required and significant damage to Client or its customers would occur if the data was unavailable	Serious to severe impact
Medium	Standard availability of the data is required	Limited to serious impact
Low	Limited availability required	No critical impact

Implementation and Remediation

In order to positively impact business performance, IT governance processes must have focus and visibility on the overall business processes with which business and IT engage. Each point of engagement must be identified and monitored to ensure the interaction of the following four components:

• Strategic Alignment
• Risk Management
• Performance Management
• Value Delivery

Initially, Plexeon develops a tailored IT Governance Policy Book for our clients based on the desired Business and IT Standards and Procedures. Then we remediate the IT environment and implement the Policies.