information technology governance policy, which contains at least the following requirements: (a) conduct internal audit and operation review, systematically; (b) correct deviation and follow up the result of
following requirements: (a) conduct internal audit and operation review, systematically; (b) correct deviation and follow up the result of correction, systematically. Chapter 2 Establishment of Policies
should take into account knowledge necessary for the personnel to keep up with the continually changes of technology. 10. Resource allocation such as office appliances, computers, and software, etc. which