Celebrate what you want to see more of! — Thomas J. Peters.
__________________________________________________________
A brief write up on the benefits of continuous improvement is provided at
the end of this email. The write up also includes a few leading resources.
Enjoy.
HAGW.
Dan
Dan Swanson
President & CEO
Dan Swanson & Associates
Email: dswanson_2005%40yahoo.com">dswanson_2005
yahoo.com
__________________________________________________________
Dan Swanson & Associates, is a for-profit venture that focuses on the development and sharing
of knowledge that improves the capability and "capacity" of organizations and its leaders.
__________________________________________________________
"Quality is never an accident; it is always the result of high intention, sincere effort, intelligent direction, and skillful execution; it presents the wise choice of many alternatives." - W. Foster.
_______________________________________________________
www.securitybenchmark.com
http://finance.groups.yahoo.com/group/Dans_SECemails/
http://finance.groups.yahoo.com/group/Dans_CCCemails/
http://www.complianceweek.com/
____________________________
End Notes
Please feel free to forward my resource Notices to your colleagues (anytime).
ALSO - To subscribe, send an email to:
Dans_CCCemails- subscribe yahoogroups. com
__________________________________________________________
The EDPACS Publication.
__________________________________________________________
I have become the editor of the EDPACS publication this past month (it'll be a part time effort). EDPACS is a monthly audit, control, and security newsletter (with ~24 pages in each issue) and is the world's longest running IT Audit newsletter and now going into its 35th year!!! Going forward, EDPACS will be focused on four key subject areas, that is, we'll provide comprehensive articles regarding Governance, Audit, Control, and Security.
http://www.informaworld.com/smpp/title~content=t768221793~db=all
__________________________________________________________
For Extra Credit – i.e. to support the continuous improvement (CI) of internal audits
( and/or for the CI of any project related efforts).
----------------------------------------------------------
A post-project review is very useful in improving the internal audit process, i.e. consider completing a six step review process utilizing a facilitated workshop.
1. Declare intent of the review—To identify “lessons learned” and apply them in future audit projects.
2. Select participants – Include the key participations from the internal audit.
3. Prepare for review—Have a facilitator organize the workshop.
4. Conduct the review – Complete the 2 to 3 hour workshop to identify and agree to the top 5 successes and top 5 opportunities for improvement.
5. Present findings – Report the findings to Internal Audit senior management.
6. Prepare report, develop and adopt recommendations – Formally incorporate the recommendations into the internal audit quality and improvement program and standard operating practices (of the internal audit department).
Further background information:
a) Are You Learning From Project to Project?
www.nealwhittengroup.com/articles/pmn3-99.asp
b) Neal Whitten's No-Nonsense Advice for Successful Projects - Neal Whitten.
www.managementconcepts.com/publications/project_management/nononsense.asp
© 2005 by Management Concepts, Inc. All rights reserved. Used with permission.
ALSO - (fyi and consideration).
Two excellent white papers from Tripwire are now out (see below).
1. www.tripwire.com/resources/asset_request.cfm?aid=3300
2. http://www.tripwire.com/files/guide/prescriptive_guide.pdf
__________________________________________________________
1. Achieving Operational Excellence
http://www.tripwire.com/files/guide/prescriptive_guide.pdf
__________________________________________________________
2. Canada Implements Corporate Governance: Bill 198 and Internal Controls for Technology whitepaper highlights include the three elements of Bill 198 that have the most impact on IT, namely:
Control (internal controls over financial reporting, and disclosure controls and procedures)
Evaluation (governance, measurement and recordkeep
