ISO 17799 Information Aggregator

How to Kickstart Improvement in Service

Posted: June 20th, 2010 | Author: | Filed under: Uncategorized | Tags: , , , , , , , , , , , , , , | No Comments »

A lot of the business our organisation manages is concentrated on the product generation aspects of our clients business. For a manufacturer this means the shop floor procedures where parts are put together in a sequence to build a saleable product. When we talk to a potential client concerning improvement programs or processes the client instantly assumes we are talking of improvement within the manufacturing area, and that improvement – we are told – needs to be centred on workforce concerns, which are centred on pay and benefits!

This is in no sense an overstatement of the way company managers view their employees.

While improvements are clearly possible inside such an environment, it’s also true that a significant percentage of the staff isn’t directly involved with producing saleable products, but with administrative service support. These employees are frequently seen in a different light to the manufacturing group, and it is apparent to us that any improvement process that bypasses administrative functions also misses the opportunity to achieve significant efficiency savings for the employer. However, an improvement program has to capture the imagination of the participants, while providing a mechanism for individuals and work groups to participate and be successful. It is also necessary for managers to encourage individual contributions and contribute their managerial ‘weight’ to the achievement of any improvement. All of this while not seeking to highjack the credit for any performance gain.

While considering the differences of work pattern and culture that is the norm for the administrative and support functions in these businesses, the similarity of work to staff working in service industries became apparent, where much of the activity is clerical and administrative. Whatever solution could be found to enable us to engage with these people would probably work regardless of the nature of the business. We were clear in our minds that long term improvement programs typical of manufacturing facilities would not be appropriate for administrative functions.

For many years we were attracted by the pragmatic teachings of the late Philip Crosby, author of Quality is Free and many similar books. The program defined in that book has been adapted world-wide to the benefit of countless organisations and individuals. Less well know within the same tome is a program he chose to call ‘Make Certain.’ With some effort we adapted Make Certain to a 21st century European culture and sought an opportunity to trial the outcome.

A current client allowed us the opportunity to show its worth within an administrative workforce of 120 staff. Working with groups of around 20 individuals, each with a mixture of skills and department affiliation, we spent time explaining the process and encouraging their involvement and contribution to improve both overall and specific efficiencies and effectiveness. We too learned from this experience and were able to develop the program further.

For our client’s organisation the trial run was a success because for possibly the first time each person understood the nature of their own individual work process, and how this related to – and effected, all of the surrounding processes. This understanding led to a desire to improve, and because local managers and supervisors were participants measurable performance improvements were achived. This initial trial of the ‘Make Certain’ program was a phenomenal success. An estimated 10% increase in efficiency, as measured by the ‘work units’ produced by the staff involved, only 9 months from program implementation.

The up-front cost to the organisation – for training – was equivalent to a loss of 360 hours employed time – probably somewhat less working time! This along with a support expense estimated to be around 20 man-days of management time.

Overall it cost the organisation 65 days of lost time to achieve a saving in the first year of 2700 hours ( 10% of 27000 hours, based on 120 staff and 230 working days per year.) What to do with 10% additional work capacity is a problem that would delight any business manager.

The entire process was initiated with minimum investment, employed no high profile specialists or techniques, and succeeded because the participants had the freedom to believe in themselves and test their own solutions.

Truly, as Phil Crosby said, Quality is Free.

Retrieved from “http://www.articlesbase.com/business-articles/how-to-kickstart-improvement-in-service-898099.html”

Excerpt from: How to Kickstart Improvement in Service


How Business Opportunities are Progressing in the UK – A Focus on the North East

Posted: June 20th, 2010 | Author: | Filed under: Uncategorized | Tags: , , , , , , , , , , , | No Comments »

The North East has one of the best information technology infrastructures in the UK. All internet connections are fully linked to broadband and independent switches and connections to international, national and continental networks promote resilience in the system. The region also hosts several key data storage and recovery facilities. This in a nutshell means they have technology and internet access covered.

The North East is home to one of the world’s leading personal finance providers. They have created a new contact centre, employing around 500 people, at Cobalt Business Park in North Tyneside making the contact centre expertise link even more accessible.

In addition to the employable skills enjoyed in the region, the industry is also supported through the many institutes, mostly based out of universities and most are recognised worldwide as a one of the leaders in its field. Its research includes stem cell, manufacturing, bioscience, technology and digital subject matters as well as a whole host of others including design.

Big manufactures decisions to move to the North east has prompted many companies to relocate or start up in the region and the industry now has a workforce of skilled people and because North East England is less crowded than other regions there is more land available for housing development yet there is a large area of unspoilt countryside around the main cities and urban centres, with attractive towns and villages served by good transport links within the region and outside of it. This is why North East England comes top of work life balance polls time and time again.

The UK has an open and business-friendly culture that is highly tuned to the demands of international markets. UK businesses are responding to global changes and increasing worldwide competition by facing outwards and adapting new ideas and thinking quickly. This knowledge-driven approach, backed by huge public investments in education, training and business support, is a high priority in regions like North East England to attract Business opportunities in the UK.

North East England is home to 588 overseas companies from 32 countries, employing over 27,000 people therefore making an ideal place for overseas investors looking for business opportunities in the UK [http://www.investnortheastengland.co.uk/page/index.cfm] or business opportunities in England.

Invest NorthEast England are a regional based development agency that encourage Business opportunities in the UK [http://www.investnortheastengland.co.uk/page/index.cfm]

Article Source:

http://EzineArticles.com/?expert=Tracy_Hildreth

Read the rest here: How Business Opportunities are Progressing in the UK – A Focus on the North East


About ISO27001 Benefits And Features

Posted: June 20th, 2010 | Author: | Filed under: Uncategorized | Tags: , , , , , , , , , , , , , | No Comments »

What is commonly known as ISO 27001 is an information security management system. This is an expansion of ISMS standard. Its full name is ISO 27001. It was introduced in 2005 by the International Organization for Standardization (ISO) in collaboration with the International Electro Technical Commission (IEC). There are various features and benefit available to organization by getting the ISO 27001. Organizations can apply for independent certifications of their ISMS. The standard covers all types of organizations (like commercial enterprises, government agencies and non-profit organizations) and all sizes from micro-businesses to huge multinationals.

ISO 27001 generally plays a very important role in monitoring, review, maintenance and improvement of an information security management system. It works like an overall management and control framework for managing an organization’s information security risks. There is no specific code or condition is available to stop the management function using this certificate. Bringing information security under management control is a necessity for sustainable, directed and continuous improvement of an information security management system. In doing so, it generates greater interest in and awareness of information security that seeks an independent certification of its ISMS. Every organization should try to get such kind of quality certificate, this help the organization to gain more profit in business as well as to get brand name in society.

It is released public on Oct 2005 but is based heavily upon the British Standard, bs7799-2. Bs7799 itself was also released in same year. This contains some set of rules and regulation followed by the organization. Around more than ten thousand institution applied and obtained this certificate.

ISO 27001 is not only an advanced version of BS7799-2 and also inherit other international standard also there are various certification released by government and well so international local bodies to make sure organization is running properly. Organization can apply for this kind of certificate and show their code of conduct to public. ISO 27001 is often considered to be the most important and more reliable in the society hence many organizations like to get the ISO 27001 certificate. The ISO 27000 is also partnered with the many ISO certificates like ISO 9001, ISO 14001, etc. ISO 27001 is applied by organization to show that they are very good in ethics and following all the rules and regulation properly put forward by their government.

The prime objective of this standard normally supports to establish, design, implement and manage an effective information management system which protects information of an organization from any risks. Decision adoption of this standard should be followed in every organization. The certificate also keen in valuing the people which were working in company as well as how company treating employee.

There are various sub standards also present in the ISO 27001. Each sub section denotes some specific quality and specification should be followed by the organization. There also a standard called plan to check, this help the organization to plan their quality and they can check whether they attained or not. ISO 27001 also help the organization to maintain ethic rules in as well as help the organization in business by getting new order. Organization also gain more profit by using this ISO 27001 certificate. The benefits of ISO 27001 are not only numerous but also diverse.

Design and manage an independent information management system. ISO 27001 can be used within any organization to design and formulate its specific set of security requirements and desired objectives. It can also help in seeing that the plans are implemented and the desired security objectives are met. This standard makes the implementation process of security management system more formal and rigorous apart from diminishing the risks considerably.

Minimize and manage security risk. ISO 27001 helps to make sure that unacceptable information security risks are avoided. It further helps in managing any risk in the most cost effective manner.

Win the confidence of business partner. Certification improves the organizations marketing potential by causing its business partners to be convinced of the stable state of the organization’s information security. It also relieves the business associates of the necessity of carrying out its own research on the organization’s information security management.

Organizations can use this standard to provide relevant information about information security policies, directives, standards and procedures to its trading partners as well as any other organization that they interact with for operational or commercial purposes.

Analyze existing information security management process. ISO 27001 helps in identifying, understanding and analyzing the status of the current information security management processes. It is utilized by internal as well as external auditors of organizations to explain the information security policies of the organization and also the directives and standards that it adopts and to what extent the organization complies with those policies, directives and standards.

Interpretability. If the partner organizations both follow ISO 27001 standardization, then they can achieve a comfortable level of interoperability even though they may belong to very different backgrounds because of the common set of standardization guidelines that they follow.

Quality assurance. Whether it is the organization or the business partners, there should be some quality in the information security system and hence of the organization in general since a clearly defined standardization process is applied.

Bench marking. An organization can use the ISO 27001to measure its status against that of its competitors. They can emphasize on their current rank and the developments that they make as opposed to their rivals.

General security awareness. The ISO 27001 is a formal set of specifications that establishes, manages and controls and implements a security management system and hence avoids any possible information security risks. In doing so, it generates greater interest in and awareness of information security that seeks an independent certification of its ISMS.

Alignment of staff. Implementation of this standard generally demands the involvement of both the business management staff and the technical staff. Hence, as a consequence, communication and information technology coordination is achieved easily in greater measure.

This is a good certification standard for a company to reach a new quality goal for raising the bar to the next level.

Retrieved from “http://www.articlesbase.com/information-technology-articles/about-iso27001-benefits-and-features-1172547.html”

Follow this link: About ISO27001 Benefits And Features


Online Business Copyrights and Disciplines

Posted: June 17th, 2010 | Author: | Filed under: Uncategorized | Tags: , , , , , , , , , , , | No Comments »

Online businesses do best with online marketing. Online opportunity and online work is, at the moment, at its zenith. Online communities help me connect Defining Collaboration Communities and Collaboration Web 2. Perhaps a better way of stating the issue is: What should you do to make online work successful in your work area. Most people manage by deadlines, and making decisions based on the online input keeps it real. People need to know what they are expected to do when they come to the online work area.

Creative Commons licenses attach to the work and authorize everyone who comes in contact with the work to use it consistent with the license. Creative Commons licenses are expressed in three different formats: the Commons Deed (human-readable code), the Legal Code (lawyer-readable code); and the metadata (machine readable code). Creative Commons licenses give you the ability to dictate how others may exercise your copyright rights–such as the right of others to copy your work, make derivative works or adaptations of your work, to distribute your work and/or make money from your work.

You will want to check to see that the online program you are interested in provides solid, standards-based content, is an accredited program, and the instructors are licensed by the state certification agency in the subject area of the course. (There are some strong and mixed views about whether that would fly in a court if one is licensed as a counselor or therapist. The issue of license portability also was raised, specifically in the context of forensic evaluation as an expert, but of course the notion of having cooperation between states would have greater implications for the profession as more consultation of all varieties becomes easier to do through the use of technology. The license is a statement as to what others may do with your work, so you should select a license that matches what you are happy for others to do with your work. Finally, you can also consult with a lawyer to obtain advice on the best license for your needs.

What information should your organization know, but you don’t. This information will get you started as you explore the online learning opportunity. If you want to see how this online endeavor works, check out some of the information for the other “audiences,” like the online teacher. The manager needs intelligent courseware and user interfaces, tailored to his level, without commercial `fuzzy information but with opportunities for in-depth study. For example, keep a backup copy of files on a home computer so you can e-mail important information to students.

The contractor shall provide technical and analysis support to the government in support of the USMCC mission and COSPAS-SARSAT. -provide technical support for the analysis of false alarms and interferers, the definition of service areas, the addition of new [Search and Rescue Point of Contacts], the evaluation of new COSPAS-SARSAT related technology, and the commissioning of new MCCs. In support of its contention that the work is beyond the scope of SSAI’s contract, the protester points to the language in the SOW that expressly provides that SSAI is not responsible for maintaining any proprietary software, the fact that no express language covering the work is contained in the contract, the fact that when SSAI’s contract was let Techno-Sciences was responsible for maintaining the proprietary online software, and the fact that costs under the contract have exceeded the estimated price of the work.

NOAA responds that the work being performed by SSAI under these task orders is within the scope of SSAI’s contract because of the broad language of the technical support section of the SOW, which was said to cover support of the entire COSPAS-SARSAT mission as well as the USMCC effort–both online and offline functions–with the sole exception of maintaining Techno-Sciences’s proprietary software. The record shows that the express purpose of the SSAI contract is to provide NOAA with the required support necessary to operate and maintain the USMCC. Consistent with this purpose, the language in the scope of work broadly defines technical support to include, among other things, analysis of new or changing Cospas-Sarsat requirements, and other support as required by the Cospas-Sarsat mission. C of the SOW specifically requires SSAI to provide technical and analysis support to the government in support of the USMCC mission and Cospas-Sarsat, without any stated restrictions.

The Open University Business School (UK) is a pioneer in identifying competencies of online coaches. An advisory committee of business, government, and educational leaders was formed and met annually to provide input to the hubsite managers. In fact, many companies have used patents to protect novel ways of doing business on the Web. However, it’s advisable to officially register the copyright for Web content that has high business value, since official registration provides irrefutable proof of authorship. Creating and Managing Information Security Policies Survey: Companies disregard data security breach risks Blogging on corporate laptops is risky business Convergence of security and network management has pros and cons Embarking on the ISO 17799 certification trail How can a CSO take ownership of a security program. The goal of any online business is to sell something, be it a product, service, or information. Your web site should reflect how you want customers to feel about your business. One of the top Internet business strategies is to choose relevant keywords for the most efficient search engine optimization.

“The article includes research on tipping points and a review of issues involved in building successful networks. Online work is organized according to workshop topics. Each workshop has its own folder with work related to that workshop in the folder. Also make sure to follow these rules of “Netiquette” to make sure your work is the best it can be: Give credit in your works cited list to anyone whose work you use. This overview focuses on copyright, which explicitly protects “original works of authorship. For online works created after 1977, copyright lasts for 70 years after the death of author. For online works, you apply a Creative Commons license to a work by selecting the license that suits your preferences. For offline works, you should identify which Creative Commons license you wish to apply to your work and then mark your work either: (a) with a statement such as “This work is licensed under the Creative Commons [insert description] License. The only difference between applying a Creative Commons license to an offline work and applying it to an online work is that offline works will not include the metadata and, consequently, will not be identified via Creative Commons-customized search engines. So they apply to all works that are protected by copyright law.

One of the largest benefits in working online is that the work is immediately archived — that is, it is available to everyone, anytime they want to access it. Working online is also, in some ways, more secure. Does online working save time because people do not have to meet anymore. Best practice human resource strategies would give particular attention not only to better job design and different working conditions associated with online work, but also to sophisticated strategies for building and sustaining work and knowledge networks. The online work uses the World Wide Web and we are working to develop an increasingly user-friendly environment for this networking.

Want to build a super home business our site Online Work at Home Business opportunity will show you how with video’s and one on one tution you can’t go wrong.

Like the idea of blogging want to know how to Work at Home [http://work-from-home.nzpcs.co.nz] and make money with blogging we can show you how.

Article Source:

http://EzineArticles.com/?expert=Justin_Boyce

Read more: Online Business Copyrights and Disciplines


Managing Risk in Information Technology

Posted: June 17th, 2010 | Author: | Filed under: Uncategorized | Tags: , , , , , , , , , , , , | No Comments »

As information technology increasingly falls within the scope of corporate governance, so management must increasingly focus on the management of risk to the achievement of its business objectives.

There are two fundamental components of effective management of risk in information and information technology: the first relates to an organization’s strategic deployment of information technology in order to achieve its corporate goals, the second relates to risks to those assets themselves. IT systems usually represent significant investments of financial and executive resources. The way in which they are planned, managed and measured should therefore be a key management accountability, as should the way in which risks associated with information assets themselves are managed.

Clearly, well managed information technology is a business enabler. Every deployment of information technology brings with it immediate risks to the organization and, therefore, every director or executive who deploys, or manager who makes any use of, information technology needs to understand these risks and the steps that should be taken to counter them.

ITIL has long provided an extensive collection of best practice IT management processes and guidance. In spite of an extensive range of practitioner-orientated certified qualifications, it is not possible for any organization to prove – to its management, let alone an external third party – that it has taken the risk-reduction step of implementing best practice.

More than that, ITIL is particularly weak where information security management is concerned – the ITIL book on information security really does no more than refer to a now very out-of-date version of ISO 17799, the information security code of practice.

The emergence of the international IT Service Management ISO 27001 and Information Security Management (ISO20000) standards changes all this. They make it possible for organizations that have successfully implemented an ITIL environment to be externally certificated as having information security and IT service management processes that meet an international standard; organizations that demonstrate – to customers and potential customers – the quality and security of their IT services and information security processes achieve significant competitive advantages.

Information Security Risk

The value of an independent information security standard may be more immediately obvious to the ITIL practitioner than an IT service management one. The proliferation of increasingly complex, sophisticated and global threats to information security, in combination with the compliance requirements of a flood of computer- and privacy-related regulation around the world, is driving organizations to take a more strategic view of information security. It has become clear that hardware-, software- or vendor-driven solutions to individual information security challenges are, on their own, dangerously inadequate. ISO/IEC 27001 (what was BS7799) helps organizations make the step to sytematically managing and controlling risk to their information assets.

IT Process Risk

IT must be managed systematically to support the organization in achieving its business objectives, or it will disrupt business processes and undermine business activity. IT management, of course, has its own processes – and many of these processes are common across organizations of all sizes and in many sectors. Processes deployed to manage the IT organization itself need both to be effective and to ensure that the IT organization delivers against business needs. IT service management is a concept that embraces the notion that the IT organization (known, in ISO/IEC 20000 as in ITIL, as the “service provider”) exists to deliver services to business users, in line with business needs, and to ensure the most cost-effective use of IT assets within that overall context. ITIL, the IT Infrastructure Library, emerged as a collection of best practices that could be used in various organizations. ISO/IEC 20000, the IT service management standard, provides a best-practice specification that sits on top of the ITIL.

Regulatory and Compliance Risk

All organizations are subject to a range of information-related national and international legislation and regulatory requirements. These range from broad corporate governance guidelines to the detailed requirements of specific regulations. UK organizations are subject to some, or all, of:

* Combined Code and Turnbull Guidance (UK)

* Basel2

* EU data protection, privacy regimes

* Sectoral regulation: FSA (1) , MiFID (2) , AML (3)

* Human Rights Act, Regulatation of Investigatory Powers Act

* Computer misuse regulation

Those organizations with US operations may also be subject to US regulations such as Sarbanes Oxley and SEC regulations, as well as sectoral regulation such as GLBA (4), HIPAA (5) and USA PATRIOT Act. Most organizations are possibly also subject to US state laws that appear to have wider applicability, including SB 1386 (California Information Practice Act) and OPPA (6) . Compliance depends as much on information security as on IT processes and services.

Many of these regulations have emerged only recently and most have not yet been adequately tested in the courts. There has been no co-ordinated national or international effort to ensure that many of these regulations – particularly those around personal privacy and data protection – are effectively co-ordinated. As a result, there are overlaps and conflicts between many of these regulations and, while this is of little importance to organizations trading exclusively within one jurisdiction, the reality is that many enterprises today are trading on an international basis, particularly if they have a website or are connected to the Internet.

Management Systems

A management system is a formal, organized approach used by an organization to manage one or more components of their business, including quality, the environment and occupational health and safety, information security and IT service management. Most organizations – particularly younger, less mature ones, have some form of management system in place, even if they’re not aware of it. More developed organizations use formal management systems which they have certified by a third party for conformance to a management system standard. Organizations that use formal management systems today include corporations, medium- and small-sized businesses, government agencies, and non-governmental organizations (NGOs).

Standards and Certifications

Formal standards provide a specification against which aspects of an organization’s management sytsem can be independently audited by an accredited certification body and, if the management system is found to conform to the specification, the organization can be issued with a formal certificate confirming this. Organizations that are certificated to ISO 9000 will already be familiar with the certification process.

Integrated Management Systems

Organizations can choose to certify their management systems to more than one standard. This enables them to integrate the processes that are common – management review, corrective and preventative action, control of documents and records, and internal quality audits – to each of the standards in which they are interested. There is already an alignment of clauses in ISO 9000, ISO 14001 (the environmental management system standard) and OHSAS 18001 (the health and safety management standard) that supports this integration, and which enables organizations to benefit from lower cost initial audits, fewer surveillance visits and which, most importantly, allows organizations to ‘join up’ their management systems.

The emergence of these international standards now enables organizations to develop an integrated IT management system that is capable of multiple certification and of external, third party audit, while drawing simultaneously on the deeper best-practice contained in ITIL. This is a huge step forward for the ITIL world.

Sources:

(1)Financial Services Authority

(2)Markets in Financial Instruments Directive

(3)Anti-money laundering regulations

(4)Gramm-Leach-Bliley Act

(5)Health Insurance Portability and Accountability Act

(6)Online Personal Privacy Act

Alan Calder is an international authority on IT Governance and information security management. He led the world’s first successful implementation of BS 7799, the information security management standard upon which ISO 27001 is based, and wrote the definitive compliance guide for this standard, IT Governance: A Manager’s Guide to Data Security and BS7799/ISO17799. The 3rd edition of this book is the basis for the UK Open University’s postgraduate course on Information Security. He has just written, for BSI, a management guide on integrating ISO 27001 and ISO 20000 Management Systems, drawing heavily on ITIL best practice. He is a consultant to companies around the world, including Cisco.

Article Source:

http://EzineArticles.com/?expert=Alan_Calder

Read the original: Managing Risk in Information Technology


ITIL – Understanding and Using IT Service Management

Posted: June 17th, 2010 | Author: | Filed under: Uncategorized | Tags: , , , , , , , , , , , , | No Comments »

‘ITIL’ is a term that is fast gaining currency around the IT world. It is often wrongly described as ‘IT governance’ – in fact, on its own, it certainly isn’t this. ITIL is a collection of best practices that helps companies implement an IT Service Management culture. However, its growing popularity reflects the substantial impact it can make on a company’s IT and business performance and the fact that, in combination with other frameworks, it is a vital ingredient in creating true IT governance.

What is IT Service Management?

Today’s businesses are increasingly delivered or enabled using information technology. Business and IT management need guidance and support on how to manage the IT infrastructure in order to cost-effectively improve functionality and quality. IT Service Management is a concept that deals with how to define and deliver that guidance and support. In common with other modern management practice, it views things from the customer’s perspective, i.e. IT is a service that the customer or consumer receives. It can be made up of hardware, software and communications facilities, but the customer perceives it as a self-contained, coherent entity.

So what is ITIL?

Standing for ‘IT Infrastructure Library’, ITIL is a set of best practices that are at the heart of the IT Service Management approach. It provides guidance on how to manage IT infrastructure so as to streamline IT services in line with business expectations. ITIL is a best practice framework, presenting the consolidated experience of organisations worldwide on how best to manage IT services to meet business expectations.

ITIL was originally developed during the 1980s by the UK’s Central Computer and Technology Agency (CCTA), a government body, which created ITIL version 1 as an approach to incorporating various vendor technologies and serving organisations with differing technical and business needs. CCTA has now become part of the Office of Government Commerce (OGC), which, as official publisher of the ITIL library, updated it, published version 2 and continues to develop and support it.

ITIL has since become widely adopted across the world in both public and private sectors and is recognised as best practice, being deployed in organisations of all shapes and sizes.

What makes up the ITIL Library?

ITIL documentation consists of seven ‘sets’ or ‘volumes’: Service Support, Service Delivery, ICT Infrastructure Management, Security Management, Planning to Implement Service Management, The Business Perspective and Applications Management.

Of these, Service Support, Service Delivery and Security Management are considered the central components of the ITIL framework, covering vital issues such as Incident Management, Configuration Management, Change Management, IT Service Continuity Management, Availability Management and IT Security Management.

Learning about ITIL

The seven ITIL volumes are published by The Stationery Office, the official publisher of the UK government. In addition, to gain an overview and a sense of how to navigate these, it is helpful to consult one of several recommended introductory texts. ‘Foundations of IT Service Management Based on ITIL – An Introduction’ is widely accepted as the best starting point and self-study guide. ‘Implementing Service and Support Management Processes – A Practical Guide’ is a thorough and comprehensive handbook on the subject, while the ‘itSMF Pocket Guides’ provide a good overview of each of the ITIL components.

Getting certified

Part of the reason for the recent growth in ITIL awareness is the publication in December 2005 of a new global standard to which businesses can become certified. ISO 20000 (or ISO/IEC 20000:2005, to give it its correct name) is closely based upon the pre-existing British standard BS15000 – in fact, it is virtually indistinguishable. The standard comprises two parts: ISO/IEC 20000-1 is the specification for IT Service Management against which an organisation’s practices can be certified; ISO/IEC 20000-2 is the ‘code of practice’ that describes best practices and the requirements of Part 1.

BS15000 has become widely used around the world since it was published in 2003 and was adopted virtually unchanged as the national standard in Australia and South Africa. A number of companies across the USA, Europe and Asia have already become certified as BS 15000 compliant. We also recommend several excellent books that provide guidance on achieving BS15000/ISO 20000 compliance.

Upon the publication of ISO 20000, BS15000 was withdrawn and individual standards and certification bodies are drawing up their own formal transition programmes for conversion to the new standard. Companies already holding BS15000 should encounter no difficulty in converting their certification to the new standard, as this should be one of the considerations addressed by the individual certifying bodies.

Practitioners can also pursue a structured programme of ITIL examination and certification, comprising the ITIL Foundation Certificate, ITIL Practitioners Certificate and ITIL Managers Certificate. Examinations and certification in Europe are managed through two independent bodies: EXIN, the European Examination Institute for Information Science; and ISEB, the Information Systems Examination Board. Between them, these two organisations control the entire certification scheme. In the United States, HDI is a principal organiser of examination and certification, and it and similar organisations provide coverage elsewhere around the world. These organisations ensure that personal certification is fair, honest and independent of the organisations that provide the training, and accredit training suppliers to bring about a consistent quality of course delivery.

ITIL and IT Governance

When combined with certain other frameworks, ITIL makes a major contribution to the creation of effective IT governance. ITIL processes can be mapped to CobiT (Control Objectives for Information and Related Technology) processes, and the two frameworks complement each other nicely: if the CobiT control framework tells the organisation ‘what’ to do in the delivery and support areas, ITIL best practices help the organisation define ‘how’ to deliver these requirements. Similarly, ITIL works very effectively with ISO 17799, the international code of best practice for information security, providing guidance on how to manage the various processes that ISO 17799 prescribes.

By drawing upon these three complementary frameworks as appropriate to its needs, an organisation can establish an IT governance regime that delivers real and lasting competitive advantage to its business.

Alan Calder is CEO of IT Governance Limited, an authorised international distributor of ITIL books (published by TSO on behalf of the Office of Government Commerce) and of British and international standards published by BSI. The seven ITIL volumes are available at http://www.itgovernance.co.uk/catalog/23, while introductory books may be accessed at http://www.itgovernance.co.uk/catalog/7. All items may be purchased online for worldwide delivery. For more information visit http://www.itgovernance.co.uk/itil.aspx

Article Source:

http://EzineArticles.com/?expert=Alan_Calder

See more here: ITIL – Understanding and Using IT Service Management