Connecting Risk & Compliance with ITSM – 21/03 @11:00 CET (1Hour)

This webinar series aims to connect service management and architecture
professionals and their communities.
Organized by:  itSMF International (https://www.itsmfi.org/) and The Open Group
(https://www.opengroup.org/)
Platform: Teams Meeting. Contact eddy@itsmf.be for the link of this event.
Put „Conneceting risk & Compliance“ in the subject of your email.


Length: 1 hour

Introduction: This is series of webinars focused on connecting the various
disciplines in IT management, breaking down the silos to optimize and streamline IT
management. This initiative is a joint effort by The Open Group and itSMF
International.

Agenda:

  1. Welcome & Introduction – Why this topic? Patrik Solc, itSMF International
  2. Integrate Risk Management into ITSM Rob Akershoek, Co-Chair IT4IT Forum
    within The Open Group
    Overview of risk and compliance frameworks, practices and regulatory
    requirements. How to integrate risk and compliance into your Enterprise
    Architecture and ITSM practices?
  3. Integrate data privacy & data governance into EA/CMDB, Prof. Dr. Andreas
    Hartmann, HTWK Leipzig, Fakultät Digitale Transformation. Impact of data
    compliance and governance for IT management.
  4. Customer Use Case – Mário Patoprstý, Enterprise Architect, Tatra bank.
    Managing risk and compliance by connecting risks to your Enterprise Architecture
    system and CMDB (including DORA Act).
  5. Q&A At the end of the presentations, there will be a Q&A session and an
    opportunity to identify additional topics for future webinars.


The need to integrate Risk & Compliance with Enterprise Archietcture and ITSM
Managing risk and compliance is becoming more and more challenging.
Organizations are managing more and more digital products and services, more
components, more vendors, more integrations, more changes while we face increasing
security threats and need to comply with increasing regulatory requirements.
Risk management is often a silo within an organization. To become successful risk and
compliance management must be part of EA and ITSM.
Key questions to be answered?

  • How can we handle this increasing challenge for managing risks?
  • How do we ensure compliance to regulatory requirements such as GDPR, NIS2,
    DORA Act, AI Act, etc.?
  • How to get more insight in the complex IT-ecosystem and associated risks?
  • How to embed risk and compliance into ITSM? How to delivery faster and safer?

Risk management is maintaining their own policy and control framework, having their
own tools and practices. Risk management acts as a silo. As a result, an organization
doesn’t have an integrated view of how digital products and services comply to policies
and controls. What services are critical? What services are at risk? What is being done
to reduce risks?
Most often Enterprise Architects, Product Owners and ITSM practitioners are not aware
about all policies and controls, how ensure compliance, etc. This causes friction, delays
and a lot of manual effort.
A new approach is needed to managing digital. An approach where risk & compliance is
fully integrated with Enterprise Architecture, DevOps and IT Service Management.
Join this webinar to learn about how to get IT in control.