[ISM3 Users] Tuesday Insight: Two studies from OCEG.

[Vicente Aceituno]

The ISM3 Consortium collaborates with other organizations with similar
aims. I find OCEG's work very interesting. Participation in the study
is no cost and the reports are provided to all participants without
cost as well. Please consider participating:

a) Managing Privacy Practices: Promulgating Compliance Through the
Extended Enterprise
http://www.oceg.org/Thumbnail/Image/width/120/height/50/%7e%2fuploads%2faxentis_tagline_final_2.gifhttp://www.oceg.org/Thumbnail/Image/width/120/height/50/%7e%2fuploads%2fEYwebLogo.gif

Section One – Perspective
You'll be able to use the report from this section to:
•       Populate the "issue outlook" section in your privacy business case
•       Communicate how your current approaches compare to peers

Section Two – Execution of Information Management Practices
You'll be able to use the report from this section to:
•       Frame and prioritize potential privacy control framework projects
•       Identify where further guidance and resources need to be developed

Section Three – Effectiveness of Information Management Practices
You'll be able to use the report from this section to:
•       Frame and prioritize potential privacy life-cycle projects
•       Prioritize potential privacy projects in the context of
various audiences
•       Facilitate audit planning
•       Identify methods of hardening your extended enterprise protections

b) Enabling Governance, Risk & Compliance with Technology
http://www.oceg.org/Thumbnail/Image/width/120/height/50/%7e%2fuploads%2fciscoweblogo.gifhttp://www.oceg.org/Thumbnail/Image/width/120/height/50/%7e%2fuploads%2fDeloitteWebLogo.gifhttp://www.oceg.org/Thumbnail/Image/width/120/height/50/%7e%2fuploads%2fSAPWebLogo.gif

This study provides you insights into:
* Challenges and strategies for satisfying informational needs for GRC
* Challenges and strategies for scaling from pockets of GRC activities
to integrated processes
* Perspectives on leveraging existing infrastructure for GRC needs
* Priority initiatives for developing GRC enabling architecture
* Degree of adoption and desire to implement key enabling technologies

In case you need text only, the link for the surveys are as follows:

Privacy Survey – http://www.oceg.org/takesurvey/obsprivacy
Technology Survey - http://www.oceg.org/takesurvey/obstech

My best

Vicente