Strategi - Governance Flashcards
Web 2006 - defining IT Governance
How does the paper define Governance?
Lacks a single definition, but entails:
- Structures: This refers to the way IT is organized within a company, such as reporting structures and decision-making processes.
- Control Frameworks: These are policies and procedures that help ensure IT is used effectively and aligns with business goals. Examples include IT security policies or project management frameworks.
- Processes: These are the ongoing activities involved in managing IT, such as budgeting, risk management, and performance measurement.
Huygh et al - Management concerns COBIT 5 view
What is COBIT 5?
COBIT 5 is a framework designed to help organizations establish and implement effective IT governance practices.
Process-oriented: The framework outlines a set of IT governance processes that organizations can follow to achieve their IT goals.
Covers various IT domains: COBIT 5 processes span different areas of IT management, such as planning, building, deploying, and monitoring IT systems.
Not a one-size-fits-all solution: The research suggests that the specific COBIT 5 processes most useful for an organization will depend on its specific goals and context.
Huygh et al - Management concerns COBIT 5 view
What does the research tell us about Alignment?
The research found that 15 out of 37 COBIT 5 processes are important for business/IT alignment. The most important process is “manage strategy,” which ensures strategic IT plans align with business goals.
Other important processes involve ensuring continuity of critical business operations.
Huygh et al - Management concerns COBIT 5 view
What does the research tell us about IT Security?
The most important processes define, operate, and monitor information security management systems.
These processes directly address all aspects of information security: confidentiality, integrity, and availability of information.
Huygh et al - Management concerns COBIT 5 view
Critical perspective
Not Industry Specificity
Agility - emerging technologies and constantly evolving business needs.
Does not address the human element - skilled peope etc.
These points highlight the importance of tailoring COBIT 5 to the specific needs and context of your organization. It should be a guiding framework, not a rigid rulebook.
To fix the issues with COBIT we design IT governance systems that engage people accross the firm –> Well & Ross
Well & Ross - Designing IT Governance
Confusion around IT Governance and the two main areas of IT Governance
The paper traces the roots of IT governance in two areas: corporate governance, which focuses on overall organizational control, and strategic information systems planning, concerned with aligning IT with business strategies.
IT governance itself is described as ensuring IT serves the business and its goals.
However there are many different definitions, with focus on different areas, which makes it difficult to compare research or have clear discussions.
Well & Ross - Designing IT Governance
New Framework
The author proposes a five-part framework for IT governance. This framework moves beyond structures and processes, instead focusing on key outcomes:
- Strategic Alignment: Ensuring IT investments and strategies directly support the organization’s overall business goals.
- Delivery of Business Value: Using IT effectively to create benefits and advantages for the organization.
- Performance Management: Monitoring and evaluating how well IT is functioning and achieving its objectives.
- Risk Management: Identifying and mitigating potential problems and threats related to IT.
- Control and Accountability: Having clear ownership and responsibility for IT decisions and their outcomes.
Jason
Define what IT Governance does
IT Governance is the process of establishing policies, frameworks, and practices to ensure that IT resources are used effectively, securely, and aligned with business goals.
It’s like setting the rules of the road for how your organization uses technology.
Jason
Why is IT Governance a wicked problem
- Conflicting Stakeholders
- Incomplete and evolving requirements
- No optimal solution - it can be implemented in many ways
- Ripple effects from IT Governance
Jason
Three questions for effective Governance
- What are the desired outcomes
Decisions to ensure effective management and use of IT? - Who is responsible and accountable?
Who should make the decisions - How should the process work?
How will these decisions be made and monitored
