Use this comprehensive guide to focus on the optimal investment in, and the proper management of, critical IT resources.

Example review documents covered in this guide include: IT strategic plans and other strategic planning documents; IT steering committee materials; IT presentations/communications to the board of directors; IT policies and governance processes; third-party service provider agreements and RFP processes; IT risk assessment and risk mitigation strategies and activities; communications to executive management and BOD related to IT risk management; IT risk catalogs; IT organization chart and job descriptions; and policies, procedures and processes for resource management.