IDSC 3001: Test D

Objectives of Enterprise Architecture

Technology is complex and requires sophisticated planning called _________________.

3 types of software servers

web servers, mail servers, and virtual servers

Computer Hardware

Physical components of information technology, which includes the computer and the following peripherals:

Storage devices

Input devices

Output devices

Operating System

Computing system needs to be controlled. Provides a common set of controls for managing computer hardware.

Distributed Computing

A form of computing where systems in different locations communicate and collaborate to complete a task.

Web Services

Small pieces of code that are accessed via the application server that permit interoperable machine-to-machine interaction over a network.

URL meaning

Uniform Resource Locator

URL

Identifies resources on the internet along with the application protocol needed to retrieve it. Often used interchangeably with "Web address."

HTML

Hypertext Markup Language - a language used to create web pages

HTTP

HyperText Transfer Protocol - the protocol used for transmitting web pages over the Internet

Web Hosting Service

provide shared or dedicated hosting of one or more services for their customers

Cache

Temporary storage space used to speed computing tasks.

DNS

domain name service

DNS (Domain Name System)

Internet directory service that allows devices and services to be named and discoverable.

Board of Directors

play a key role in overseeing, administering, and monitoring a company.

Vertical Compliance

regulatory requirements for food, medical devices, higher education, etc.

Horizontal Compliance

financial reporting, labor laws, data privacy (cross-industry)

Objective of GRC

1.Regulatory requirements

2.Monetary risks and / or reputation risks

GRC pros

Provides Transparency for Shareholders

Create a high barrier entry for new competitors

Discourages current competitors from 'cheating'

GRC cons

Expensive and Time Consuming

Can Limit Innovation & Risk Taking

Risk of Fines and Penalties

GDPR

General Data Protection Regulation

GDPR Scope

the European Union's new privacy law has many companies around the world worried.

Sox Objectives

enforce corporate governance and strengthen corporate accountability by:

•internal checks and balances

•levels of approval and sign-off

•full transparency

•adequate controls

•supported by enterprise applications (ERP, CRM, SCM)

PCI

Council offers comprehensive standards to enhance payment card data security.

What is GRC?

Government Regulation & Compliance

Keys to Successful Implementation

must happen locally, owned by the business, people are as important as the process, needs to be a central function, technology is very important.

Key Capabilities of IT GRC Solutions

- assess risk

- increase visibility