# Measuring Program Effectiveness

Using COBIT, ITIL, and Security Frameworks 91
	Frameworks 91
	Not Useful: Asset Valuation 95
Planning and Organization 98
	Assessing Risk 99
	Human Resources 101
	Managing Investments 102
Acquisition and Implementation 104
	Identifying Solutions 104
	Installing and Accrediting Solutions 107
	Developing and Maintaining Procedures 111
Delivery and Support 112
	Educating and Training Users 114
	Ensuring System Security 117
	Identifying and Allocating Costs 120
	Managing Data 122
	Managing Third-Party Services 123
Monitoring 126
	Monitoring the Process 127
	Monitoring and Evaluating Internal Controls 128
	Ensuring Regulatory Compliance 129
Summary 130