Agency to deliver shared governance, risk compliance service

01.09.2011
CenITex, the Victorian Government's shared services IT agency, will adopt a new IT governance, risk and compliance (ITGRC) package to improve its information security function.

The package will assist CenITex in managing the governance, risk and compliance obligations of its customer base for the infrastructure services within their service catalogue offerings.

The IT governance capability will specifically help manage legislation, regulation, industry security standards, WoVG security standards, CenITex policy/standards/security controls, policy exemptions and security metrics.

The IT risk management capability will help manage threats and risks to projects and ongoing core business activities, store system security plans and security risk management plans.

The IT compliance capability will help manage security policy compliance and support security control testing.

Pending a successful implantation, the agency will look to offer the solution as a whole-of-government service to up to 15 other state agencies and departments.