There are many great resources available to help companies evaluate options related to operations, financial management, IT and information security. At Executive Advisors Group, we recommend the first step always be focused on frameworks and standards:

Control Frameworks

ISACA