This updated edition of the ESF's highly-influential standard of practice was developed to provide ESF member organizations with a challenging but achievable benchmark against which they could measure their performance in keeping the business risk associated with IT-based information systems within acceptable limits.
It covers the entire spectrum of arrangements which need to be made to control risk, based on in-depth research and the extensive knowledge and practical experience of ESF members. |