IT Examiner School

Key Drivers – ISP Framework

• Protect assets, data & information • Ensure continuity of the business by protecting assets • Reduce exposure for legal & financial liability • Ensure integrity for shareholder confidence • Relationship between the need for access & the need for protection

Common ISP Frameworks

• “Blueprint” for building a program • Series of documented processes • Define implementation of program • Ongoing management of risk & controls • Frameworks can be specialized • Industry specific or regulatory