Wednesday, May 02, 2007

Project Penalty: Two Minutes For High-Sticking

Poor project performance and audit findings lead to changes, that may include project penalties. ...

... "The audit found numerous projects simply poured more money into projects that were delayed, rather than penalizing contractors for taking longer than expected. " ...


Via Wisconsin Radio Network: IT Project Fixes

Labels: , , , , ,

Monday, February 12, 2007

Create Innovation Culture: Understand Where to Begin

Here's a diagnostic tool to understand where your innovation culture gaps are and how to approach them. ...

Diagnostic tool: the innovation quotient

... "Based on the Innovation DNA, it gives you a way to begin conversations and create action plans based on solid information. " ...


Via Innovation Network: Where to Begin

Labels: , , , , ,

Thursday, December 15, 2005

Project Management Audit

It's not often that you get the opportunity to look inside someone else's project in an objective way while it's still in progress. This audit report from the Treasury Board of Canada is interesting in the depth to which it goes in identifying risks - and in showing the importance the secretariat gave to addressing the concerns.
One issue that will be familiar to many people working with a client (internal or external) to deliver a system is the availability client staff. One can almost sense the Project Manager's frustration at not being able to access knowledgable staff even though the importance had been made clear at the outset and the budget for back-filling approved.
Another familiar issue is the argument amongst stakeholders over the project scope. This is the one item that the audit team rated as High Risk. And credit to the secretariat for setting up a new steering committee chaired by an Assistant Secretary to address the issue.
All in all, an intersting read.
Project Management Audit - Treasury Board of Canada Secretariat - Part 2 of 2

Labels: , , , ,

Wednesday, November 30, 2005

Microsoft Security: Risk Govern Audit ...

Microsoft is making concerted effort on security management, appealing to technology independent partners with services focused on security policy, governance, compliance, risk assessment, risk management and auditing, while balancing its focus on infrastructure security, the technical perspective. ...

Microsoft Security: Risk Govern Audit: Via ISACA: Microsoft Partner Program Includes ISACA Certification in Restructure of Its Security Solutions Competency ...

... "Having a skilled and innovative security partner ecosystem is central to the company’s approach and, therefore, a large part of the effort has been significant changes to the Microsoft Partner Program, Security Solutions Competency, announced this week in partnership with long-established certification programs from Information Systems Audit and Control Association® (ISACA®) and International Information Systems Security Certification Consortium (ISC)2. " ...


Michael Domingo provides update on Microsoft's updated approach to security, which balances the technical with the strategic security management: risk, govern, audit. ...

Via Microsoft Certified Professional Magazine: Security Competency Gets Revamped

... "Microsoft says it has taken a technology agnostic approach within its Security Solutions competency, splitting it into two specializations that address technical issues and the other that looks at security policy and risk management, governance, and auditing. " ...


With more than 47,000 members who live and work in more than 140 countries, the Information Systems Audit and Control Association® (ISACA®) is a recognized worldwide leader in IT governance, control, security and assurance. Founded in 1969, ISACA sponsors international conferences, publishes the Information Systems Control Journal®, develops international information systems auditing and control standards, and administers the globally respected Certified Information Systems Auditor™ (CISA®) designation, earned by more than 40,000 professionals since inception, and the Certified Information Security Manager® (CISM®) designation, a groundbreaking credential earned by 5,200 professionals.

Labels: , , , , , , , , , , ,

Tuesday, October 11, 2005

Governance Software: OMB A123 Compliance

Governance technology software supports government compliance with OMB A123 requirements ...

Governance Software: OMB A123 Compliance: Via Protiviti: Protiviti Releases Cost-Effective Technology Solution that Enables Government Agencies to Comply with OMB A-123 Requirements ...

... "Protiviti Inc., a leading risk consulting and internal audit services firm, today announced the release of a new product extension for the Protiviti Governance Portal designed to help the federal sector achieve complete, sustainable and cost-effective compliance with OMB A-123 requirements. This extension leverages functionality from Protiviti's SarbOx Portal, which launched in April 2003 and emerged as one of the market's leading solutions for Sarbanes-Oxley compliance with nearly 300 commercial client installations worldwide. " ...

Labels: , , ,

Wednesday, September 07, 2005

Ontario Government Project Maturity Assessment

This site gives an interesting example of a government department using project capability maturity assessment scores for setting goals for improvement. It includes the essential components of assessment dimesions, current scores and target scores.
Scoring models vary in the range and detail of the dimensions. This one focuses on project accountability and governance. It shows how management has identified the areas that need to change the most.

1.4.3 Corporate Project and Program Management--Third Party Audit of the Workplace Safety and Insurance Board: Executive Summary | Ministry of Labour

Labels: , , , , ,

Sunday, August 07, 2005

COBIT Course: IT Governance Controls Framework ...

COBIT Course: IT Governance Controls Framework: ISACA and ITGI Launch Online COBIT Foundation Course

Course on the COBIT framework to provide training to IT auditors and practitioners ...

... "Increased worldwide adoption of Control Objectives for Information and related Technology (COBIT) framework has created a need for IT professionals and auditors to become skilled at using it within their organizations. To address this need, the IT Governance Institute (ITGI) and the Information Systems Audit and Control Association (ISACA) released the COBIT Foundation Course, a self-paced, electronic tutorial developed by ITpreneurs. " ...

Labels: , , , ,