Plug and Socket Preparing IT Management for Governance Rob England v6v6

"The main reasons for negative outcomes are the emphasis on the technical, financial and scheduling aspects of IT activities rather than on the whole business context of IT use... "Effective governance of IT assist[s] those at the highest level of organisations to understand and fulfil their legal, regulatory and ethical obligations in respect of their organisation's use of IT" ISO/IEC 38500

Terminology Governance Governance fulfilment Executive Management IT Governance Corporate Governance of IT Enterprise Governance of IT

Governance Governors Managers Governance Governance fulfillment Management delegationescalationaccountability Owners

Governance Governors Managers Governance Governance fulfillment Management Execution IT Governors IT Managers IT Governance IT Governance fulfillment IT Management IT Execution Governors Managers Governance Governance fulfillment Management Execution

Governance Governors Managers Governance Governance fulfillment Management Execution Governors Managers Governance Governance fulfillment Management Execution Governance of IT IT Management IT Execution IT Governance fulfillment Line-of-business owners and CIO

Governors Managers Governance Governance fulfillment Management Execution ISO evaluate monitor direct

plan do check act evaluate monitor direct vision strategies policies performance conformance plans proposals

Governors Managers Strategy Policy Plans Processes Direct Evaluat e Monitor

Governors Managers Strategy Policy Plans Processes Strategy Policy Plans Strategy Policy

Plug and Socket When the governors come governing

Plug and socket Governors Managers Governance Governance fulfillment Management Execution plug and socket Governors Managers Governance Governance fulfillment Management Execution

Plug and socket Governance fulfillment Management Direct MonitorEvaluate

Direct Delegations, steering committee(s) Vision, strategies and policies Decisions

Plug (Governance)Socket (Management) StrategicVision, goals Broad strategy Fulfilment policy Strategy(s) TacticalPolicy framework Policy system Broad policy (bounds, rules, decisions) Plans Practices OperationalProcedures Tools Direct

Monitor Responsibility Risk Conformance Performance, objectives Capability, capacity to implement Investments

Monitor Balanced scorecard, KPIs Risk analysis Compliance audit Capability analysis

Socket (Governance)Plug (Management) StrategicAchievement Risk Intelligence TacticalPerformance Compliance Capability Balanced scorecard Audit OperationalRegisters Reports Monitor

Balanced scorecard My favourite: effectiveness efficiency quality/reliability customer value From Waltzing With The Elephant processes followed decisions correct risks controlled problems fixed or see ISACA's Unlocking Value, p19 for an example of the classic financial customer internal learning and growth

Evaluate Environment Service and project portfolios Proposals: strategy, projects, plans, opportunities, contracts Ongoing operations: performance, conformance, escalations

Socket (Governance)Plug (Management) StrategicPlans (for review)Planning Portfolios TacticalProposals (for review) Escalations (for decision) Programmes Change OperationalDecision processes (structures, roles, escalations) Evaluate

Governance cycles Decisions Proposals, reports Strategy, reviews, audit

References ISACA COBIT 5 ISO/IEC Corporate Governance of IT NCC IT Governance ITIL Service Strategy 2011 Waltzing with the Elephant, Mark Toomey

© Copyright 2012 Two Hills Ltd All rights reserved Governance fulfillment Management Direct MonitorEvaluate Governance Execution