Filter by:

All

Data Security

Cybersecurity

Data Usage

Data Regulations

Process Governance

Compliance

Supply Chain

Ethics & Sustainability

Health and Safety

Artificial Intelligence

Software Development

Human Resources

Financial Discipline

Getting Started

Sector - Healthcare

Sector - Senior Living

Sector - Hotels

Personal Data Security

Home Life

Risk Assessment and Management

Taking risks is part of doing business. Addressing up front the risks that most affect a particular company and industry helps reduce the negative impact if it occurs. Results from not addressing risks range from inconvenience to devastating. But managing risks can soften the financial blow and enable long term success.

Change Control Governance

Physical and digital changes are constantly made in business operations. But connected to each change is often a chain of other actions to consider, both before and after the change. Changes to processes, products, or services has serious ramifications to your success and reputation if done incorrectly. Change control is meant to reduce the chances of a key item being missed or not communicated.

Machinery Controls - Program Management

Proper maintenance on your business machinery and equipment is critical for maximizing its value, whether the equipment is used for manufacturing widgets, doing calibrations, or producing lab results. But machinery maintenance must be consistent and continuous. Establish and manage a program to effectively maintain business machinery and equipment, including documentation, ownership and responsibility, policy and procedures, and training.

Machinery Controls - Maintenance

Proper maintenance on your business machinery and equipment is critical for maximizing its value, whether the equipment is used for manufacturing widgets, doing calibrations, or producing lab results. Great maintenance is preventive and not reactive. Follow a structured method to ensure effective maintenance controls, including inspections, preventive maintenance, operating procedures, safety, and systems access.

Mobile Equipment Management Program

Managing a mobile equipment program covers several areas, primarily focusing on the safety of employees and machinery and ensuring reliable and available equipment. Structured mobile equipment guidelines focus on preventive maintenance, repairs and services, operating equipment, pedestrian safety program, policies and procedures, operator training, spare parts management, accounting for equipment, and meeting laws and regulations.

Project Management - Pre-project Work

Properly managing projects is vital for controlling costs, delivering what is expected to the customer, and meeting the competing needs. Considering all the key elements when initiating a project provides the only realistic chance of delivering successful projects. During project initiation, define business expectations by addressing benefits, stakeholders, and a project charter. This is the first of four project management governance topics.

Project Management - Planning

Properly managing projects is vital for controlling costs, delivering what is expected to the customer, and meeting all the competing needs. There are many issues to consider when planning for a project, including detailed requirements, cost, schedule, communications and engaging stakeholders, quality, resources, risk, and procurement. Project planning entails how you plan to complete the project, based on the resources and environment within your company. This is the second of four project management governance.

Project Management - Execution

Properly managing projects is vital for controlling costs, delivering what is expected to the customer, and meeting all the competing needs. There are many issues to consider when undertaking or executing a project, including managing change control, communications, cost control, schedule control, scope control, resources, quality, risk, procurement, closing, and transition to operations. Project execution involves managing, directing, monitoring, and controlling the project details, starting with the project plan and adjusting it to meet the inevitable issues that arise. This is the third of four project management governance topics.

Project Management - Oversight

Properly managing projects is vital for controlling costs, delivering what is expected to the customer, and meeting competing needs. There are many issues to consider when overseeing project work, including project selection, programs, portfolio, policies and processes, standards and guidelines, project documentation, and organizational structure. This applies whether you have a formal project management office (PMO) or a small management team to oversee projects. This is the fourth of four project management governance topics.

Disaster Recovery Plan

Like life insurance, a disaster recovery plan (DRP) is something you hope never to use but it definitely helps if something disastrous happens. A DRP addresses the possible risks to all your key systems, without which your business would have difficulty functioning. Whether a disaster caused by employees, criminal elements, or nature, preparedness is critical to returning your business back to full functionality.

Data Breach Notification

Companies that manage or possess customer or employee personal information are responsible for reporting theft or disclosure of that data. Each state and country has its own requirements for reporting a security breach of personal data. A data breach plan is designed to address the technical and administrative requirements before a data breach occurs so that the focus can stay on breach remediation.

User Access Management

User access controls, or lack of them, is a leading reason how cyber criminals can access business data. System and application access controls focus on keeping your user access list current and clean. This requires a focus on terminations, special privileges (admin rights), contractors, and regular reviews.

Privileged Access Management

Unwanted access into systems to abuse or steal valuable company data is usually accomplished using privileged accounts. Privileged accounts provide almost unlimited access to critical business systems and information. Actively managing privileged system access (PAM) is undoubtedly a key component of stopping cyber theft, ransomware, and other system attacks.

Separation of Duties (SOD)

Separation of Duties (SOD), also known as Segregation of Duties, is a key component of many regulations and a focal point for various types of audits. Implementing SOD helps improve compliance and security, reducing the risk of fraud by eliminating conflicts of interest. Know how to identify where one person has excess control over a critical process.

Application Development Controls

Security holes in applications are sought by cyber criminal elements. Whether internal or external applications, security controls are needed to safeguard valuable information. Consistently adhering to basic application development controls reduces the possible vulnerabilities in your systems.

Policy Development

A policy is a documented management statement that identifies an important company issue and states why it needs to be done. Clear and concise policies provide all stakeholders with a good understanding of how your business wants to operate. Policy Development defines the guidelines for creating these solid policies. The lack of a comprehensive policy can sway a legal opinion and ruling. So it's critical to get the policy right from the beginning.

Policy Management

A successful policy clearly states the requirements for everyone operating within a business. Policy management defines how to maintain existing policies as circumstances change. A policy that does not match what is actually happening in your company is confusing to internal and external stakeholders. In some cases, inaccurate policies may have serious legal ramifications.

Enterprise IT Governance

Regardless of company size and products provided, information technology (IT) is the backbone that keeps it running. But often an IT function is not aligned with company goals. This results in mistrust, frustration, wasted money, and failed projects. IT enterprise governance focuses on aligning and blending IT requirements to keep the lights on and simultaneously work with the business to grow its value.