1. Plug and Socket Preparing IT Management for Governance Rob England v6v6

2. "The main reasons for negative outcomes are the emphasis on the technical, financial and scheduling aspects of IT activities rather than on the whole business context of IT use... "Effective governance of IT assist[s] those at the highest level of organisations to understand and fulfil their legal, regulatory and ethical obligations in respect of their organisation's use of IT" ISO/IEC 38500

3. Terminology Governance Governance fulfilment Executive Management IT Governance Corporate Governance of IT Enterprise Governance of IT

4. Governance Governors Managers Governance Governance fulfillment Management delegationescalationaccountability Owners

5. Governance Governors Managers Governance Governance fulfillment Management Execution IT Governors IT Managers IT Governance IT Governance fulfillment IT Management IT Execution Governors Managers Governance Governance fulfillment Management Execution

6. Governance Governors Managers Governance Governance fulfillment Management Execution Governors Managers Governance Governance fulfillment Management Execution Governance of IT IT Management IT Execution IT Governance fulfillment Line-of-business owners and CIO

7. Governors Managers Governance Governance fulfillment Management Execution ISO 38500 evaluate monitor direct

8. plan do check act evaluate monitor direct vision strategies policies performance conformance plans proposals

9. Governors Managers Strategy Policy Plans Processes Direct Evaluat e Monitor

10. Governors Managers Strategy Policy Plans Processes Strategy Policy Plans Strategy Policy

11. Plug and Socket When the governors come governing

12. Plug and socket Governors Managers Governance Governance fulfillment Management Execution plug and socket Governors Managers Governance Governance fulfillment Management Execution

13. Plug and socket Governance fulfillment Management Direct MonitorEvaluate

14. Direct Delegations, steering committee(s) Vision, strategies and policies Decisions

15. Plug (Governance)Socket (Management) StrategicVision, goals Broad strategy Fulfilment policy Strategy(s) TacticalPolicy framework Policy system Broad policy (bounds, rules, decisions) Plans Practices OperationalProcedures Tools Direct

16. Monitor Responsibility Risk Conformance Performance, objectives Capability, capacity to implement Investments

17. Monitor Balanced scorecard, KPIs Risk analysis Compliance audit Capability analysis

18. Socket (Governance)Plug (Management) StrategicAchievement Risk Intelligence TacticalPerformance Compliance Capability Balanced scorecard Audit OperationalRegisters Reports Monitor

19. Balanced scorecard My favourite: effectiveness efficiency quality/reliability customer value From Waltzing With The Elephant processes followed decisions correct risks controlled problems fixed or see ISACA's Unlocking Value, p19 for an example of the classic financial customer internal learning and growth

20. Evaluate Environment Service and project portfolios Proposals: strategy, projects, plans, opportunities, contracts Ongoing operations: performance, conformance, escalations

21. Socket (Governance)Plug (Management) StrategicPlans (for review)Planning Portfolios TacticalProposals (for review) Escalations (for decision) Programmes Change OperationalDecision processes (structures, roles, escalations) Evaluate

22. Governance cycles Decisions Proposals, reports Strategy, reviews, audit

23. References ISACA COBIT 5 ISO/IEC 38500 Corporate Governance of IT NCC IT Governance ITIL Service Strategy 2011 Waltzing with the Elephant, Mark Toomey

24. © Copyright 2012 Two Hills Ltd www.twohills.co.nz. All rights reserved Governance fulfillment Management Direct MonitorEvaluate Governance Execution