IT Security Office: The Way Forward for IT Governance for Libyan Organizations

IT governance (ITG) is the processes that ensure the effective and efficient use of IT in enabling an organization to achieve its goals. ITG ensures the organization, its data, and its people are protected, while reducing risk and syncing with business objectives. This is achieved through the appropriate IT policies, processes, and procedures, that must be applied consistently across the organization. This paper presents the way forward for adopting the ITG. It introduces the IT Security Office proposal that helps any Libyan organization or institution planning to deploy IT Governance. The proposal is based on the need for any organization to secure; according to the international IT policy and standards, (1) the current use, operation, and implementation of its Information Technology (IT) systems, and (2) the vision of the organization to adopt for example electronic administrative and financial systems and starting its digital transformation journey. This document is organized as follows. First, the proposal introduces IT and its Security Office function and adoption. Then, the proposal specifies the administrative hierarchy of the office in the organization chart and why we need it. Third, it defines the working conditions of the office in such an organizational chart. Fourth, the office duties and responsibilities are described. Finally, the proposal gives recommendations of how an organization could start working in this office and highlights some benefits of implementing such approach.