Executive course on managing risks of IT
THE GROWING IMPORTANCE of technology in all aspects of business was emphasised with the launch of an executive certificate course in IT governance through enterprise risk management.
The course, launched in June by the University of Hong Kong's School of Professional and Continuing Education (HKU SPACE) together with Grant Thornton, will cover general concepts of governance, how IT relates to them and the associated risks.
'IT systems drive so much of a modern business, but executives don't put enough time into understanding it or managing the risks,' said Patrick Rozario, a principal at Grant Thornton who specialises in business risk services. 'As information becomes more accessible, there are major implications for security, privacy and internal control procedures.'
He said recognised international standards, such as Cobit and BS7799, were comprehensive and suitable for large organisations. Other firms could benefit from following these standards, but they also had to know how to tailor things for different purposes and their own industries.
'In most cases it is not practical to implement everything recommended,' Mr Rozario said. 'Even so, businesses in Hong Kong have yet to jump on this whole issue, and should be doing more.'
In his view, senior-level company discussions about IT usually centred on speed of response, performance and budget constraints. There was insufficient focus on security and controls, which often remained the case until something went wrong.
'IT is so complicated these days that many managers just don't appreciate what goes on,' he said. 'That's why we saw a need for this type of course.'
The programme comprises four modules of eight lectures each, and classes are held on weekday evenings. The medium of instruction is Cantonese, supplemented by English. Professionals from Grant Thornton will teach most modules.
