Assign reviewing investments to the Information Technology steering committee, as necessary.

CONTROL ID
13625

CONTROL TYPE
Human Resources Management

CLASSIFICATION
Preventive

This Control directly supports the implied Control(s):

Establish and maintain an Information Technology steering committee., CC ID: 12706

There are no implementation support Controls.

Approving and monitoring major information security projects and the status of information security plans and budgets, establishing priorities, approving standards and procedures (Information Security Committee ¶ 3 Bullet 2, Guidelines on Information Security, Electronic Banking, Technology Risk Management and Cyber Frauds)
Establish an IT strategy committee at the board level. This committee should ensure that IT governance, as part of enterprise governance, is adequately addressed; advise on strategic direction; and review major investments on behalf of the full board. (PO4.2 IT Strategy Committee, CobiT, Version 4.1)