Professional Practice in IT: A Case Study

The assignment provides a comprehensive overview of three IT governance frameworks - COBIT, ITIL, and ISO 27002 - and their implementation in different companies. It also discusses the significance of complying with Australian standards and regulations, particularly in the context of an Information and Communication Technology (ICT) company. The case study highlights the importance of understanding and adhering to laws and regulations set by organizations like Standard Australia.

Running head: PROFESSIONAL PRACTICE IN IT
Profession Practice in IT
Name of the Student
Name of the University
Author note

2
PROFESSIONAL PRACTICE IN IT
Table of Contents
Task 1.........................................................................................................................................3
Task 2.........................................................................................................................................3
Task 3.........................................................................................................................................4
Reference....................................................................................................................................6

3
PROFESSIONAL PRACTICE IN IT
Task 1
My host company does have in pale IT Governance framework. The framework used
in my company is ISO 27002. ISO 27002 IT Governance framework is the collection of data
that offers security guidelines in order to help the organization to maintain and improve the
information security of the company (Eberlein, et al 2014). ISO 27002 IT Governance
frameworks also enable implementing of the process in order to gain security in the
management infrastructure (Almeida, Pinto & Mira da Silva, 2016).
The IT Governance frameworks used in my friends companies are COBIT and ITIL
respectively.
Major differences between the three IT Governance network are as follows: -
 COBIT is initiated by Information System Audit and Control Association which is
abbreviated as ISACA whereas ITIL was initiated by the UK government and ISO
27002 was initiated as ISO 27001, ISO 27002 acts as an inherited framework that is
derived from ISO 27001 (Fenz, Plieschnegger & Hobel, 2016).
 ISO 27002 is recognized in the IEC/IEC standards whereas COBIT is worldwide
recognized and ITIL is globally recognized as IT Governance framework.
 COBIT is recognized as a high level IT Governance framework whereas ITIL is
considered to be equivalent to the COBIT or sometime inferior to the COBIT IT
Governance framework (Karkoskova & Feuerlicht, 2015). ISO 27002 stands behind
the standards of the COBIT and ITIL IT Governance framework (Moreira, Vivone &
da Silva, 2015, January).
Task 2
The company I have been working for was a company based on the technology of
Information Technology. The company did database jobs and the main aspect of the company

4
PROFESSIONAL PRACTICE IN IT
was to store data and modulate the data. The company was registered with the Standards
Australia. Standard Australia is labelled to be a reliable organization that set references to the
companies linked with them. Standard Australia was established in the year 1922 (Foster, et
al 2016). Standard Australia is a non-government organization that is inked officially with the
Australian government and has 73 members under the standard setting organization. Standard
Australia has developed internationally and has been aligned with the Australian standards
that serves for the benefits for the nation. Australian Standard provides cloud storage for the
organizations that are registered to the organization. As my company was registered to the
organization my company enjoyed the benefits of the cloud computing for storing the data.
As my previous company mainly dealt with fetching, storing and modulating the data, the
usage of cloud storage proved to be very beneficial for the company. While storing data and
modulating those data I came across the cloud storage benefit provided by the Australian
standard to my company where I was doing my internship.
Task 3
In an internship that I was going through in an Information and Communication
technology company I was allotted the post in maintaining the communication sector. The
task that I was allotted was to ensure the networking systems that are related to the
communication sector. The communication sector was based on the digital communication
platform. All the communication that was to be done was done through the digital medium.
Laws are set by the Australian Standards to ensure that there is no sense of complexity in the
span of communication. The laws that are set by the Australian Standards are meant to be
followed by the company. Prosecution measures are set in case of not abiding by the laws of
the Australian Standard. In case of the failure of staying abided by the law the company
would have been sued by the Australian standard. In order to abide by the laws of the
legislative I needed to compliance the legislative of the Australian Standard. The laws related

5
PROFESSIONAL PRACTICE IN IT
to my field of interest were distinct in the legislation of Australian Standard This was an
instance where I went through the legislative in order to learn the basic laws that are to be
followed while working for an Information and Communication Technology company.

6
PROFESSIONAL PRACTICE IN IT
Reference
Almeida, R., Pinto, P., & Mira da Silva, M. (2016). Using ArchiMate to assess COBIT 5 and
ITIL implementations.
Eberlein, B., Abbott, K. W., Black, J., Meidinger, E., & Wood, S. (2014). Transnational
business governance interactions: Conceptualization and framework for analysis.
Regulation & Governance, 8(1), 1-21.
Fenz, S., Plieschnegger, S., &Hobel, H. (2016). Mapping information security standard iso
27002 to an ontological structure. Information & Computer Security, 24(5), 452-473.
Foster, S. J., Stewart, M. G., Loo, M., Ahammed, M., & Sirivivatnanon, V. (2016).
Calibration of Australian Standard AS3600 Concrete Structures: part I statistical
analysis of material properties and model error. Australian Journal of Structural
Engineering, 17(4), 242-253.
Karkoskova, S., &Feuerlicht, G. (2015). Extending MBI Model using ITIL and COBIT
Processes. Journal of Systems Integration, 6(4), 29.
Moreira, J. R. P., Vivone, M. J., & da Silva, P. C. (2015, January). IT GOVERNANCE AND
SOA: CONTROL OF RISKS IN THE IMPLEMENTATION OF THE SERVICE
ORIENTED ARCHITECTURE USING COBIT, ITIL AND ISO 27002. In 8ª
ConferênciaInternacionalsobreSistemas de Informação e Gestão de Tecnologia.