Slide 1

Plug and Socket Preparing IT Management for Governance Rob England v6v6

Slide 2

"The main reasons for negative outcomes are the emphasis on the technical, financial and scheduling aspects of IT activities rather than on the whole business context of IT use... "Effective governance of IT assist[s] those at the highest level of organisations to understand and fulfil their legal, regulatory and ethical obligations in respect of their organisation's use of IT" ISO/IEC 38500

Slide 3

Terminology Governance Governance fulfilment Executive Management IT Governance Corporate Governance of IT Enterprise Governance of IT

Slide 4

Governance Governors Managers Governance Governance fulfillment Management delegationescalationaccountability Owners

Slide 5

Governance Governors Managers Governance Governance fulfillment Management Execution IT Governors IT Managers IT Governance IT Governance fulfillment IT Management IT Execution Governors Managers Governance Governance fulfillment Management Execution

Slide 6

Governance Governors Managers Governance Governance fulfillment Management Execution Governors Managers Governance Governance fulfillment Management Execution Governance of IT IT Management IT Execution IT Governance fulfillment Line-of-business owners and CIO

Slide 7

Governors Managers Governance Governance fulfillment Management Execution ISO 38500 evaluate monitor direct

Slide 8

plan do check act evaluate monitor direct vision strategies policies performance conformance plans proposals

Slide 9

Governors Managers Strategy Policy Plans Processes Direct Evaluat e Monitor

Slide 10

Governors Managers Strategy Policy Plans Processes Strategy Policy Plans Strategy Policy

Slide 11

Plug and Socket When the governors come governing

Slide 12

Plug and socket Governors Managers Governance Governance fulfillment Management Execution plug and socket Governors Managers Governance Governance fulfillment Management Execution

Slide 13

Plug and socket Governance fulfillment Management Direct MonitorEvaluate

Slide 14

Direct Delegations, steering committee(s) Vision, strategies and policies Decisions

Slide 15

Plug (Governance)Socket (Management) StrategicVision, goals Broad strategy Fulfilment policy Strategy(s) TacticalPolicy framework Policy system Broad policy (bounds, rules, decisions) Plans Practices OperationalProcedures Tools Direct

Slide 16

Monitor Responsibility Risk Conformance Performance, objectives Capability, capacity to implement Investments

Slide 17

Monitor Balanced scorecard, KPIs Risk analysis Compliance audit Capability analysis

Slide 18

Socket (Governance)Plug (Management) StrategicAchievement Risk Intelligence TacticalPerformance Compliance Capability Balanced scorecard Audit OperationalRegisters Reports Monitor

Slide 19

Balanced scorecard My favourite: effectiveness efficiency quality/reliability customer value From Waltzing With The Elephant processes followed decisions correct risks controlled problems fixed or see ISACA's Unlocking Value, p19 for an example of the classic financial customer internal learning and growth

Slide 20

Evaluate Environment Service and project portfolios Proposals: strategy, projects, plans, opportunities, contracts Ongoing operations: performance, conformance, escalations

Slide 21

Socket (Governance)Plug (Management) StrategicPlans (for review)Planning Portfolios TacticalProposals (for review) Escalations (for decision) Programmes Change OperationalDecision processes (structures, roles, escalations) Evaluate

Slide 22

Governance cycles Decisions Proposals, reports Strategy, reviews, audit

Slide 23

References ISACA COBIT 5 ISO/IEC 38500 Corporate Governance of IT NCC IT Governance ITIL Service Strategy 2011 Waltzing with the Elephant, Mark Toomey

Slide 24

Copyright 2012 Two Hills Ltd www.twohills.co.nz. All rights reserved Governance fulfillment Management Direct MonitorEvaluate Governance Execution