IT Governance

ONION consulting services in IT Governance & Security

With the term IT Governance and Security it is meant the portion of Corporate Governance that addresses the management of IT systems, with the goal to align them to business objectives, so that the investments in Information Technology generate value for the company. Another task of IT Governance and Security is to manage and to mitigate the risks associated to the IT.

ONION consultancy services in IT Governance & Security include:

• Corporate Performance Management
  • Support to the introduction of quantitative corporate governance methods such as the Balanced Scorecard
  • Support to the definition and implementation of IT performance metrics and indicators
• IT Security
  • Support to the analysis and implementation of Security aspects based on the ISO 17799 standard
  • Security Assessment, Security Governance and Security Implementation services
• IT Governance Frameworks
  • Support to the appraisal and the introduction of frameworks such COBIT® (Control Objectives for Information and related Technology) and ITIL® (IT Information Library) in the operational context of the customer
  • Analysis of best-practive coverage by other frameworks such CMMI® and ISO 9001
  • Support to the analysis and implementation of the requirements of the Sarbanes Oxley law in the customer's IT operational context, and impacts analysis on existing processes.

In adition, ONION offers a suite of IT Security Services that cover the functions of Security Assessment, Security Governance and Security Implementation, as well as companion solutions such the Balanced Scorecard for the assessment of the performances of the organization and its services.

The services above are delivered by a team of high profile consultants, whose distinctive characteristics are:

• Employment of high profile professionals, who have followed the evolutions of IT frameworks since the eighties
• Proven experience in the proposal and design of improvements paths to support IT Governance and Security projects
• Specific experience in process engineering and support solutions for IT Governance and Security.

Detailed Contents

• Security Assessment
• Security Governance
• Security Implementation