IT Governance

“IT governance is the responsibility of executives and the board of directors, and consists of the leadership, organisational structures and processes that ensure that the enterprise’s IT sustains and extends the organisation’s strategies and objectives.” COBIT 4.1

Over the past 15 years Blue Chip has gained expertise working with our customers on a range of IT Governance projects including PCI DSS compliance; IT Strategy/IT and Business alignment; ISO 27001 advisory and IT due diligence.

Our experience of IT solution implementation and operation first, in real customer environments means we don’t just provide businesses with a large report and leave.  We offer tangible solutions that can be implemented and managed by our customers’ teams.   We know that we need to provide advice that is workable, independent and understood for it to be valuable.

1. PCI DSS

• Gap Analysis across the 12 PCI DSS Requirements
• Remediation planning in line with the 6 PCI DSS Milestones
• Risk assessment

2. IT Strategy

• Stakeholder analysis
• Document analysis
• MOST and PESTLE
• SWOT analysis
• Requirements gathering
• Action planning

3. ISO 27001

• Gap Analysis across the 11 ISO 27001 security domains
• Risk assessment
• Remediation planning

4. IT Due Diligence (M&A)

• Risk analysis and Information Security
• Capex and operational budgets/costs
• Technology in place
• Growth capacity and stability
• Support methods inc. 3rd parties and contracts
• IT organisation/staffing
• Software ownership and licensing
• Key investments/initiatives planned

Want to know more? For a complimentary consultation, please contact ict@bluechip.uk.com