<div>
I'm looking at server OS, software apps &amp;&nbsp;network areas of IT
</div>


I'm looking at server OS, software apps & network areas of IT

<div>
<div class="content wysiwyg-content">
Is there specific IT compliance that are more applicable to banking / financial sector,<br />
say Sarbanes Oxley, Cobit, COSO or these are just applicable to any industries' IT ?<br />
<br />
Would be good if anyone can point me to concise links that describes the above 3
</div>
</div>


Is there specific IT compliance that are more applicable to banking / financial sector,
say Sarbanes Oxley, Cobit, COSO or these are just applicable to any industries' IT ?

Would be good if anyone can point me to concise links that describes the above 3

Specific IT compliance / governance for banking

IT Administration is the processes and best practices for programming and development, and incorporates methodologies for managing activities and projects. Common methodologies include waterfall, prototyping, iterative and incremental development, spiral development, rapid application development, extreme programming and various types of agile methodology. The life-cycle "model" is a more general term for a category of methodologies, and a software development "process" a more specific term to refer to a specific process chosen by a specific organization.

IT Administration

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.

OS Security

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.