A Framework of Using Captive Insurance to Streamline IT Control and Compliance Management

Abstract

To streamline IT compliance management and reduce the compliance cost, large companies need to address the issues of incentive and information. This article proposes a framework which illustrates how companies can use a risk management approach - captive insurance - to resolve these issues and ultimately achieve cost-efficient IT compliance management.