Technology and Enterprise Risk Governance

These sources collectively provide guidance and analysis on governance, risk management, and architectural alignment within large organizations, particularly concerning information technology (IT) and information and communications technology (ICT). The Institute of Internal Auditors (IIA) offers a Supplemental Guidance and Global Technology Audit Guide (GTAG) that details the process for auditing IT governance, emphasizing the alignment of organizational objectives with IT strategy and risk appetite. The National Institute of Standards and Technology (NIST) Special Publication focuses on integrating ICT risk management (ICTRM) into Enterprise Risk Management (ERM), defining the roles and processes for managing technology risks across systemic, organizational, and enterprise levels using risk registers and profiles. Finally, an academic paper explores the challenges and inhibitors to effective stakeholder engagement in Enterprise Architecture (EA) practice, distinguishing between strategic and initiative-based engagement, while the Health Sector Coordinating Council (HSCC) emphasizes the importance of a holistic committee approach for managing legacy technology security in healthcare delivery organizations (HDOs).