Instructions

Confidentiality

Introduction

After all the work that has gone into implementing IT Controls - IT operations and audit professionals are still asking:

• Which IT controls are most important?
• What methods are most cost effective?
• Are IT Controls just an added cost – or do they actually improve IT operations?

The IT Process Institute is taking a different approach to discovering and sharing what works. The ITPI Controls Benchmarking Survey is a survey and benchmark of current IT control practices that is designed to help IT professionals identify and share proven practices in order to apply the most cost effective methods.

The purpose of this research is to apply unbiased statistical analysis to determine whether IT controls affect the value, effectiveness, efficiency, and security of information-technology operations. Based on prior research and extensive pilot testing with high-performing organizations, we developed this survey to test our hypotheses that 1) implementation of IT controls does in fact improve IT efficiency, IT effectiveness, and IT security, and that 2) some controls are better (i.e. lower cost) than others.

Participants get a customized report of how their metrics compared to industry averages, and a summary of the analysis that shows how top performers are actually implementing efficient and cost effective controls.

Free to those that participate:

• Confidential benchmark of your company’s performance compared to the population of participants in the survey.
• Analysis of what matters most when designing and implementing controls.
• Practical guidance on how to improve your efficiency and effectiveness.

This research study is made possible by the generous contribution of our sponsors Tripwire and BMC Software.

More information:

Benchmarking Survey Datasheet

Project Overview and Preliminary Findings vAug-18

Summary paper