Monitor and Evaluate:

1 Monitor and Evaluate IT Performance
1.1 Monitoring Approach
1.2 Definition and Collection of Monitoring Data
1.3 Monitoring Method
1.4 Performance Assessment
1.5 Board and Executive Reporting
1.6 Remedial Actions

2 Monitor and Evaluate Internal Control
2.1 Monitoring of Internal Control Framework
2.2 Supervisory Review
2.3 Control Exceptions
2.4 Control Self-assessment
2.5 Assurance of Internal Control
2.6 Internal Control at Third Parties
2.7 Remedial Actions

3 Monitor and Evaluate Internal Control
3.1 Identification of Laws and Regulations Having Potential Impact on IT
3.2 Optimization of Response to Regulatory Requirements
3.3 Evaluation of Compliance with Regulatory Requirements
3.4 Positive Assurance of Compliance
3.5 Integrated Reporting

4 Provide IT Governance
4.1 Establishment of an IT Governance Framework
4.2 Strategic Alignment
4.3 Value Delivery
4.4 Resource Management
4.5 Risk Management
4.6 Performance Measurement
4.7 Independent Assurance

--Mdpeters 08:42, 29 April 2006 (EDT)