Practical IT Service Management. A concise guide for busy executives

IT Governance Publishing, Thejendra B.S

This book provides a detailed guide to IT service management (ITSM), centered around the ITIL framework to enhance IT service delivery. It starts by introducing foundational concepts such as IT services, common challenges in IT departments, and the evolution of ITIL, particularly the 2011 edition. The early chapters cover core topics like service strategy, design, and the ITIL lifecycle, offering a strong foundation for understanding how ITIL aligns with business objectives.As the book progresses, it delves into key ITIL processes such as service desk management, incident management, problem management, change and release management, and service asset management. Each chapter explains the roles, responsibilities, and best practices for each process, providing actionable advice and real-world examples for effective application. These sections focus on improving service efficiency and handling IT challenges.The final chapters address advanced topics like service level management, financial management, supplier management, and service continuity. These insights help readers manage resources, build vendor relationships, and ensure business continuity. By the end, readers will be equipped to apply ITIL to optimize IT operations, align them with business needs, and drive continuous improvement.

Cyber Essentials. A guide to the Cyber Essentials and Cyber Essentials Plus certifications

IT Governance Publishing, Alan Calder

This book is a practical guide to achieving Cyber Essentials certification, a key step in protecting your organization from cyber threats. It starts with an overview of the Cyber Essentials scheme and explains why certification is crucial. The book covers common cyber attacks like ransomware, social engineering, and denial of service, helping you understand potential threats.It then explores essential technical controls needed for certification, such as firewalls, secure configurations, user access control, and malware protection. It also highlights best practices like managing security updates to keep systems secure. Each chapter offers actionable advice on implementing these controls, emphasizing their role in strengthening your cybersecurity framework.The book concludes with a detailed look at the Cyber Essentials certification process. It guides you through preparing for certification, completing the checklist, and undergoing the assessment. Additional resources and tips for Cyber Essentials Plus certification are included for those seeking further guidance.This comprehensive guide provides the knowledge and tools to secure your organization, achieve certification, and maintain strong cybersecurity resilience.

ITIL(R) 4 Essentials. Your essential guide for the ITIL® 4 Foundation exam and beyond

IT Governance Publishing, Claire Agutter

The ITIL® 4 Essentials guide offers a comprehensive introduction to IT service management, focusing on ITIL® 4 practices and principles. Readers gain an understanding of the four dimensions of service management—organizations, people, information, technology, partners, and suppliers—which are key to delivering effective IT services.The guide highlights ITIL® 4’s seven guiding principles, such as focusing on value, collaborating, and working holistically. These principles are essential for creating effective service management strategies. Readers will learn how to integrate these principles into their daily operations, leading to enhanced service delivery and better alignment with business goals. Additionally, the book explores the importance of the Service Value System (SVS) and the Service Value Chain, offering a detailed look at how these frameworks drive continuous improvement and value creation.Lastly, the book covers essential ITIL® 4 practices like continual improvement, change management, and incident management. Each practice is explored in depth, providing practical guidance for implementation. The final chapters offer exam preparation tips, ensuring readers are ready for the ITIL® Foundation exam, with sample questions and strategies for success.

Securing Cloud Services. A Comprehensive Approach to Safeguarding Cloud Infrastructure, Services, and Data

IT Governance Publishing, Lee Newcombe

Cloud computing plays a critical role in modern business, but with it comes a host of security challenges. This book explores the intricacies of securing cloud services, starting with foundational concepts of cloud computing and moving into specific service and deployment models. It provides insights into balancing security benefits with potential risks such as availability issues, shadow IT, and information leakage. The book goes on to focus on security threats, from hackers and insiders to government entities, while offering strategies to mitigate these risks. The practical approach continues with a deep dive into security architecture, providing a structured model to secure cloud environments across IaaS, PaaS, SaaS, and more. Further, it examines the regulatory landscape, including compliance requirements, privacy concerns, and data protection laws that impact cloud service security. Finally, the book concludes with projections about the future of cloud security and emerging challenges. Readers will gain not only the theoretical foundations but also real-world insights that they can apply to strengthen their cloud service security.

PCI DSS Version 4.0.1. A guide to the payment card industry data security standard

IT Governance Publishing, Stephen Hancock

This book provides an essential resource for anyone involved in managing or ensuring PCI DSS compliance. It begins by introducing the Payment Card Industry Data Security Standard (PCI DSS), explaining its importance, and the regulatory framework that governs it. Readers will understand how to assess their organization’s compliance status and the vital steps to avoid data breaches. The book offers a comprehensive exploration of compliance programs and how organizations can design their own effective strategies.The text then dives into the specifics of PCI DSS, focusing on its core components and requirements. Key chapters describe how to comply with and maintain compliance, as well as how to use tools like the PCI self-assessment questionnaire (SAQ). Real-world case studies of cardholder data breaches highlight the consequences of non-compliance. Readers will also learn about the integration of PCI DSS with other standards like ISO/IEC 27001.Throughout, this guide emphasizes practical advice for implementing key security frameworks such as the Software Security Framework (SSF) and Point-to-Point Encryption (P2PE). By the end of the book, readers will have a clear roadmap to not only meet but sustain PCI DSS compliance and strengthen their organization's data security practices.

Service Integration and Management (SIAM(TM)) Foundation Body of Knowledge (BoK). SIAM Frameworks from Ecosystem to Practices for Successful Service Integration

IT Governance Publishing, Claire Agutter

This book offers a detailed exploration of Service Integration and Management (SIAM™), providing insights into its frameworks, structures, and practical applications. It starts by covering the core principles of SIAM™, from its historical context to its role in optimizing service integration across multiple providers. The book then dives into the SIAM roadmap, outlining key stages such as discovery, strategy, planning, and execution, all essential for successful service management.Readers will gain an understanding of different SIAM structures, including externally sourced, internally sourced, and hybrid models, along with their respective advantages and challenges. It also explores how SIAM aligns with other service management practices like ITIL, COBIT, Lean, and Agile, offering a comprehensive approach to managing complex service ecosystems.The book places special emphasis on the roles and responsibilities within a SIAM ecosystem, including those of service providers, integrators, and customers. It also highlights the importance of cultural change, collaboration, and governance for effective SIAM implementation.Finally, readers will learn to identify and address common challenges and risks, equipping them with strategies to overcome obstacles and ensure smooth integration within their organization.

Cyber Resilience. A Comprehensive Guide to Understanding and Implementing Cybersecurity Principles

IT Governance Publishing, Alan Calder

In today’s rapidly evolving digital landscape, cybersecurity is essential for protecting organizations from cyber threats. This book provides a thorough guide to building cyber resilience, starting with an in-depth understanding of the ever-changing cyber threat landscape. It covers foundational principles such as risk management, security controls, and defense-in-depth strategies, giving readers the knowledge needed to secure digital systems effectively.The book then delves into actionable cybersecurity controls, offering insights on asset management, identity and access control, encryption, and incident response management. Each section includes practical tips for implementation, ensuring that readers can apply these strategies in real-world scenarios. The goal is to help organizations not only understand cybersecurity but also to establish robust security policies and protocols to prevent and mitigate potential risks.Finally, the book emphasizes the importance of continual improvement and monitoring to maintain a resilient cybersecurity framework. It highlights the need for regular audits, vulnerability scanning, and staff training to adapt to new threats. By the end, readers will be equipped to build and sustain a resilient cybersecurity strategy that ensures long-term protection and business continuity.

The Art of Cyber Security. A practical guide to winning the war on cyber crime

IT Governance Publishing, Gary Hibberd

This book redefines cyber security through the lens of creativity and classical strategy. It begins by exploring the mindset of the cyber defender as both artist and martial artist, highlighting the importance of intuition, flow, and individual perspective. It challenges rigid educational models and argues for a more adaptive, expressive approach to security thinking.Building on this foundation, the second part interprets Sun Tzu’s The Art of War in a cyber context. Each chapter reframes traditional military concepts—deception, preparation, leadership, and adaptability—through the realities of digital threats. The text emphasizes how timeless strategies apply to the modern information battlefield.By blending philosophy, history, and practical insight, the book offers a unique take on digital defense. It invites readers to reflect on their approach, question assumptions, and embrace both logic and creativity. This is not just a guide to threats and tactics, but a call to rethink what it means to be a cyber security professional today.

EU General Data Protection Regulation (GDPR). An implementation and compliance guide

IT Governance Publishing, IT Governance Privacy Team

This book provides a thorough exploration of the EU General Data Protection Regulation (GDPR). It starts with the core principles of GDPR, explaining its purpose, key concepts, and how it impacts data controllers and processors. The book covers essential features like data subject rights, data processing principles, and privacy compliance frameworks. It also explores the role of the Data Protection Officer (DPO) and the importance of conducting data protection impact assessments (DPIAs).Focusing on practical implementation, the book highlights the need for robust information security measures to meet GDPR standards. It provides actionable advice on best practices, including managing data breaches, ensuring lawful consent, and processing subject access requests. The guide also addresses the complexities of international data transfers in line with GDPR requirements.Finally, the book outlines GDPR enforcement mechanisms, detailing the powers of supervisory authorities and the steps to demonstrate compliance. This resource offers organizations a comprehensive roadmap to align with GDPR, laying the groundwork for effective data protection and compliance.

ITIL(R) Foundation Essentials ITIL(R) 4 Edition. The ultimate revision guide

IT Governance Publishing, Claire Agutter

This book offers a detailed introduction to IT service management and the ITIL® 4 framework by covering key concepts such as value, service management, and co-creation, providing a solid foundation for understanding ITIL®. Readers are introduced to the four dimensions of service management and how they apply to organizational success. The book also explores the various roles involved in service management, from service providers to consumers, and the essential relationships that drive value.The book further explains ITIL®’s guiding principles, such as focusing on value, thinking and working holistically, and simplifying processes. These principles form the core of ITIL® 4’s approach, emphasizing flexibility, iterative progress, and stakeholder collaboration. With practical examples and clear explanations, readers will learn how to integrate these principles into their service management practices.Lastly, the book dives deep into the Service Value System and Service Value Chain, detailing how each component contributes to delivering business value. It also explores essential ITIL® practices, such as continual improvement and incident management. The final sections provide valuable exam preparation tips to ensure readers are well-equipped to pass the ITIL® Foundation exam with confidence.

IT Governance. An international guide to data security and ISO 27001/ISO 27002

IT Governance Publishing, Alan Calder, Steve G Watkins

In the modern digital landscape, information security has never been more critical. This book introduces readers to the essential components of IT governance, focusing on frameworks like ISO 27001 and strategies for managing risks in today's complex information economy. The content explores key topics like cybersecurity, risk management, information security policies, and compliance with international standards. As you progress, you’ll learn to navigate the challenges of organizing and maintaining a secure IT environment, with insights into compliance regulations, security frameworks, and governance codes. The book provides hands-on guidance on applying security controls, setting up robust information security policies, and evaluating risks. Real-world scenarios and practical applications ensure the knowledge gained is immediately applicable to professional environments.The journey culminates in an understanding of how to integrate IT governance within an organization. You’ll learn to assess vulnerabilities, implement risk management strategies, and ensure that security measures align with both business goals and regulatory requirements. The book equips readers with the tools needed to strengthen IT systems against evolving threats and to stay ahead in the information security landscape.

The Universal Service Desk (USD). Implementing, controlling, and improving service delivery

IT Governance Publishing, Brian Johnson, Léon-Paul de Rouw

This book is your go-to guide to mastering the Universal Service Desk (USD) for improving service management. The reader will understand USD's role in enterprises, delve into its design process, and learn how to use it for effective customer service and business operations. With practical examples and industry case studies, this book offers deep insights into the application of the USD for organizational success.The book begins by introducing the USD concept, highlighting its importance in streamlining service delivery and enhancing customer satisfaction. It outlines how a demand-oriented approach can be implemented across various business environments, optimizing workflows from front-office interactions to back-office coordination. Through the chapters, readers will learn to adapt USD to meet the evolving needs of enterprises.The final chapters focus on advanced practices such as improving service quality, managing virtual USD platforms, and aligning service desk operations with business goals. By following the structured approach outlined, you’ll gain the tools to create a USD that delivers measurable value, fosters seamless communication, and aligns with organizational priorities.

ISO 22301:2019 and business continuity management. Understand how to plan, implement and enhance a business continuity management system (BCMS)

IT Governance Publishing, Alan Calder

This book offers an in-depth exploration of ISO 22301:2019 and its role in business continuity management. It begins by explaining the standards and their importance for building resilience against disruptions. Readers will learn the core principles of ISO 22301, including the PDCA (Plan-Do-Check-Act) cycle, leadership responsibilities, and the integration with other management systems.As the book progresses, readers will delve into key aspects of creating an effective business continuity plan, such as context analysis, identifying stakeholders, conducting risk assessments, and establishing support systems. Practical strategies are provided to help readers optimize business continuity solutions and incorporate them into their operations, ensuring preparedness for unforeseen risks.The book also examines methods for evaluating and continuously improving continuity plans. In the final chapters, readers are guided through the process of ISO 22301 certification, offering a clear path to securing certification and enhancing organizational resilience.

ITIL(R) 4 Drive Stakeholder Value (DSV). Your companion to the ITIL® 4 Managing Professional DSV certification

IT Governance Publishing, Claire Agutter

The book explores the essential practices and strategies for driving stakeholder value, focusing on the ITIL® 4 framework. It begins with an in-depth analysis of the customer journey, including how to design and improve value streams, ensuring customer satisfaction and service quality. The book moves into targeting markets and stakeholders, offering methods for market segmentation and defining strategies for better customer engagement.In subsequent chapters, the book delves into building strong relationships with both suppliers and customers, a cornerstone of service management success. The exploration of service offerings and demand management provides actionable insights into shaping and delivering services that meet customer needs and expectations. The process of aligning expectations through value co-creation and service agreements also becomes a focus, preparing readers to manage all stages of the service lifecycle effectively.With detailed discussions on onboarding and offboarding, continual value co-creation, and service value measurement, the book provides a holistic approach to creating sustainable value for all stakeholders. This text is invaluable for professionals seeking to understand and apply ITIL® 4’s principles in real-world scenarios.

Artificial Intelligence. Ethical, social, and security impacts for the present and the future

IT Governance Publishing, Dr. Julie E. Mehan

This book offers an in-depth exploration of Artificial Intelligence (AI), from its origins to the ethical and societal challenges it presents today. It provides a comprehensive understanding of AI’s impact on human interaction, collaboration, privacy, and security. Through analyzing both opportunities and risks, the book emphasizes the ethical concerns surrounding AI, such as bias, privacy violations, and security threats.Chapters explore AI’s transformative role in cybersecurity, misinformation, and human-machine collaboration, highlighting its implications for job markets and human relationships. Real-world examples illustrate how AI can drive progress or cause harm. The ethical dilemmas around AI, including its use in surveillance and decision-making, are thoroughly examined, presenting challenges central to modern technology.Looking ahead, the book offers a forward-thinking perspective on AI’s future, discussing emerging trends and the need for responsible policy-making. It concludes by addressing how society can prepare for AI’s continued growth, offering strategies for navigating the evolving landscape. With practical insights and deep analysis, this book helps readers grasp AI’s profound implications for our future.

ITIL(R) 4 Create, Deliver and Support (CDS). Your companion to the ITIL® 4 Managing Professional CDS certification

IT Governance Publishing, Claire Agutter

This book offers a thorough guide to ITIL® 4’s Create, Deliver, and Support (CDS) module, covering key concepts and practices for IT service management. It begins with foundational aspects of the service value system (SVS), highlighting organizational structures, roles, and collaborative cultures essential for successful service delivery. The early chapters focus on adopting a shift-left approach to resource management, helping teams prioritize efficiency and proactive problem-solving.As the book progresses, it explores the strategic planning and management of resources within the SVS, stressing the importance of continual improvement and leveraging technology to optimize service management. It also provides insight into managing value streams for new services, guiding readers on how to create, manage, and measure service value chains for improved service delivery and innovation.The later chapters address specific ITIL® practices, such as service design, incident management, problem management, and knowledge management. The book concludes with exam preparation for ITIL® 4 CDS, offering practical case studies and real-world scenarios.By the end, readers will be equipped to enhance service management processes and ensure the delivery of high-quality IT services aligned with business objectives.

Digital Ethics in the Age of AI. Navigating the ethical frontier today and beyond

IT Governance Publishing, Dr. Julie E. Mehan

Digital Ethics in the Age of AI explores the profound ethical challenges posed by the rise of artificial intelligence and its integration into our daily lives. The book covers AI’s disruptive effects across various sectors, including misinformation, privacy, and job displacement, offering clear explanations and real-world examples. The author delves into the role of AI in spreading misinformation and disinformation, including the creation of deepfakes, and highlights the increasing risk of online disinhibition driven by AI-powered interactions. The book also addresses the cognitive biases embedded within AI systems and the growing concerns over privacy, data security, and surveillance in an age of ubiquitous AI technologies. Finally, the book explores the potential for AI-driven job displacement, particularly in the cognitive class, and the societal implications of such disruptions. It also covers intellectual property challenges in the age of AI and the complexities surrounding generative AI’s impact on privacy and digital ownership. Offering solutions for mitigating these risks, Digital Ethics in the Age of AI provides a roadmap for navigating the ethical and regulatory landscape of AI today and in the future.

Service Integration and Management (SIAM(TM)) Professional Body of Knowledge (BoK). A structured approach to implementing and sustaining SIAM across complex service ecosystems

IT Governance Publishing, Claire Agutter

This book outlines a structured progression for implementing Service Integration and Management (SIAM) within complex, multi-vendor environments. It begins by defining SIAM principles, roles, layers, and structural models to establish a shared understanding of its purpose and scope.The roadmap then unfolds in four key stages. The Discovery & Strategy phase focuses on analyzing the current state, setting strategic drivers, and establishing governance foundations. In Plan & Build, the book guides readers through designing the SIAM model, sourcing structures, contracts, and process frameworks. The Implement stage addresses onboarding, transition planning, and applying change management across stakeholder groups. Finally, Run & Improve centers on operating the governance model, managing performance, conducting audits, and enabling continuous service development.Each chapter links practical methods with decision-making considerations, offering a reference for teams planning, launching, or refining a SIAM approach. The content is organized to support structured adoption while allowing flexibility for varied organizational contexts.