Reply to Message

Maybe something like...

yet_another 22nd Apr 2009

Howdy,
In the process control community, DHS created the process control security requirements forum (PCSRF, see below). The work of this organization has delineated numerous threats and has forwarded proposed guidance to avoid or counter the threat. This may be a good starting point for other players to assess the governance of their own IT systems.
Finance and accounting areas also have guidance over IT governance in the IT governance Institute (ITGI, www.itgi.org). Perhaps it would be best to decide on the set of threats (as with PCSRF), or to decide on a desired end result (as with ITGI) and create a commonwealth .org to support those initial desires. Either way, in the US, I'd suggest beginning with NIST, since they are the standard.

PCSRF - http://www.isd.mel.nist.gov/projects/processcontrol/