- Implement IT risk and control frameworks successfully
- Manage IT risk and compliance during steady state operations
- Plan and manage service levels throughout business disruption
- Assess whether IT manages its own risk and supports its commitment to the business over security, integrity, and availability of data
“When designing controls an organisation should seek a balance across four dimensions: risk and controls, process optimisation, organisation and people, and technology”
( * ) Source: KPMG LLP 2006 : “ERP Controls Integration Sustaining Compliance While Implementing Change”