Analytix, a provider of best practice-based information and communications technology (ICT)-related solutions, consulting and training, today announced it has been awarded a consulting contract to assist the National Commercial Bank (NCB) of the Kingdom of Saudi Arabia to implement an IT Risk Management Programme, based on the Risk IT Framework that was launched by ISACA in 2009.
"IT risk is an extremely important area of concern for us," commented Imad Jomaa, Head of the IT Risk Department, IT division, The National Commercial Bank.
"Only very recently has an IT Risk Framework been available and NCB wanted to take advantage of this new situation, and thus we embarked on a project at the earliest opportunity that would integrate the Risk IT Framework with the bank`s operational risk programme, in compliance with the Basel II requirements. Previously, only general risk management frameworks or standards; or information security specific frameworks were available for organisations such as ourselves that wanted to implement an IT risk management system.
"We are delighted to announce that the implementation facilitated by Analytix was successful despite it being one of the first, if not the first, implementation of ISACA`s Risk IT Framework internationally," continued Jomaa.
"The Risk IT Framework published by ISACA fills an important gap in the market, ie, it is the first specialist IT risk framework," added Johan Botha, Managing Director of Analytix.
"IT management is increasingly challenged to understand and articulate the risks and benefits of IT. IT risk management is now considered as a key component of corporate governance as highlighted by King III which has now identified IT as a key modern risk that needs to be addressed by all organisations."
For further information, please contact Charlene O`Reilly: tel 011 994 6120, fax 011 447 4192, e-mail charlene.oreilly@analytix.co.za
Share
Analytix
Analytix is a training and consultancy firm that assists organisations to understand, implement and comply with industry best practice standards and frameworks that lead to sustained process and business improvement.
Analytix satisfies the training, awareness and consulting needs of organisations in the following areas:
* Enterprise risk management
* Strategy and performance management
*
IT governance
* Enterprise architecture
* Information security
*
Business continuity
* IT services management
Its services are underpinned by internationally accepted IT management practices based on a range of de facto industry frameworks and standards such as BS25999, BS25777, CoBiT, COSO ERM, ISO 20000, ISO 27001, ITIL, MSP, Prince 2, TOGAF and the Balanced Scorecard.
Analytix has been involved with over 500 organisations globally, including companies based in Belgium, Botswana, France, Malaysia, Mauritius, Namibia, Nigeria, Saudi Arabia, Singapore, South Africa, Tanzania, Uganda and the UK.
Editorial contacts