Governance, goals, strategies, policies, standards and procedures Flashcards
Governance
The act of creating a plan for how a company will achieve a goal and making sure everyone executes the plan. The responsibility of the boards and company executives. Important that the people tasked with governance mush have the authority to enforce it.
Goal
The result we want to achieve.
Strategy
- Plan of action to achieve a goal.
- Successful strategy answers:
- Where are we now?
- Where do we want to be?
- What is the gap between the two?
- What do we need to close the gap?
Anchoring
Once people have seen a number, they will tend to tie subsequent estimates to the original number even if context is completely unrelated.
Status quo bias
People will favor a known approach even when it has been shown to be ineffective.
Endowment effect
People hold something they already have at a higher value than if they didn’t already own it.
Mental accounting effect
People treat money differently based on where it comes from how how it is spent.
Herding instinct
The tendency for people to follow others
False consensus
The tendency to overestimate the extent to which other people share our own views or beliefs
Confirmation bias
Seeking / believing opinions and facts that support a conclusion we have already reached.
Selective recall
We remember only facts and experiences that support our current assumptions.
Biased assimilation
We accept only facts that support our current position of perspective.
Biased evaluation
We attack anyone presenting acts that don’t support our current position or perspective.
Groupthink
Pressure for agreement in group settings.
Elements of a strategy
- Need to examine many elements and their interactions when creating a roadmap: people, processes, tech, other resources.
- Biggest components are resources and constraints.
- Best to employ a security framework to help guide.
- Usually a long-term process broken up into smaller projects that can be executed in a reasonable time frame.
- Built-in checkpoints to validate assumptions, change course if needed and provides metrics to continue validating the strategy.
- Constraints may be:
Legal
Physical
Ethical
Cultural
Costs
Personnel
Org structure
Resources
Time
Risk appetite
Policy
- A high-level statement of what leadership expects. * Dictates the direction.
- Doesn’t specify how, just what.
Attributes of a good policy
- Clearly describes a strategy that captures the intent of management.
- States only a single general mandate.
- Clear and easily understood by all affected parties.
- General no more than a few sentences long.
- Part of a complete set that is not more than two dozen.
Standard
- Tell us how to carry out the policy.
- Must provide enough parameters to allow us to determine if a procedure or practice meets the requirements.
- Shouldn’t limit technology options too much.
- Must have an exception process when a process can’t meet a standard.
Procedure
- List of steps required to accomplish a task.
- Defines:
Required conditions before execution
Information displayed
Expected outcome
How to handle unexpected outcomes - Must be clear and exact.
- Limit inclusion of discretionary tasks to prevent dilution.
Guideline
- Contains info useful when executing procedures.
* More flexible than standards