1. Web Governance Patricia Benoit, CISA, CIA April 2002

2. Southern California Edison2 In a Phased Approach General Governance Principles Why Govern? At the Community Level What is Governance?Where? In collaboration with the Business, IT Infrastructure & IT Appl Services Who?When? Rules & Their Enforcement To Improve an Environment via Planning By Establishing & Monitoring adherence with Standards, Guidelines & Processes How do we Govern?

3. Southern California Edison3 City Governance Analogy – Why Govern? To help communities and regions grow in harmony with the natural environment and in tune with public concerns. 1.Solving a community’s problems 2. Protecting important features 3. Guiding community growth in the future

4. Southern California Edison4 Web Governance – Why Govern? Web Governance’s helps portals and sites grow in harmony with a common environment that is in tune with business concerns. 1.Solving a community’s problems 2. Protecting important features 3.Guiding community growth in the future

5. Southern California Edison5 More Reasons for Web Governance 1.Automating business processes has created an environment that has evolved without Proper Safeguards 2.Companies make large Investments in the Web 3.Increased Vulnerabilities from Exposure to Outside World 4.Regulatory Issues Requiring Compliance (i.e. Privacy) 5.The Web is an Environment of Continuous Change

6. Southern California Edison6 In a Phased Approach General Governance Principles Why Govern? At the Community Level What is Governance?Where? Who?When? How do we Govern? To Improve an environment via Planning Rules & Their Enforcement In a Phased Approach In collaboration with the Business, IT Infrastructure & IT Appl Services When? By Establishing & Monitoring adherence with Standards, Guidelines & Processes

7. Southern California Edison7 Web Governance Definition Why Governance? Governance improves Web Communities by providing Order and Predictability around Outcomes Expected Outcomes Consistent and Reliable Web Communities that sustain and extend IT and Business Unit Strategies & Initiatives What is Governance? Governance is the Development and enforcement of Standards, Policies and Guidelines

8. Southern California Edison8 Web Governance Major Areas Security, Reliability & Infrastructure Web Application Processes & Standards Content Management Web Governance Risk Safeguards Branding/Logo Standards Content Look & Feel Standards Legal Compliance Reviews Corporate Content Reviews BU Content Reviews Portal Metrics Reviews Security Standards Architecture & Tool Standards Service Level/Performance Stds Web Production Monitoring Infrastructure Standards Web Change Management Development Process Standards Maintenance Process Standards Technical Stds & Guidelines “Best Fit” Technology Standards

9. Southern California Edison9 Web Governance Major Area - Benefits Security, Reliability & Infrastructure Web Application Processes & Standards Content Management Web Governance Risk Benefits +Appropriate Branding/Logo +Consistency Across a Portal +Prevention of Legal Issues +Approved Corporate Content +Approved Business Unit Content +Improved Quality of Portals +Reduced Development Costs +Consistent Deployment +Reduced Maintenance Costs +Appropriate Technology +Consistent Web Environment +Reduced Cost for Replacement +Protection of Assets +Alignment with I*Net Architecture +Alignment with Infrastructure +Reduced Downtime Costs +Improved Portal Reliability +Approved Web Applications

10. Southern California Edison10 In a Phased Approach General Governance Principles Why Govern? At the Community Level What is Governance?Where? Who?When?How do we Govern? To Improve an environment via Planning Rules & Their Enforcement In a Phased Approach In collaboration with the Business, IT Infrastructure & IT Appl Services By Establishing & Monitoring adherence with Standards, Guidelines & Processes

11. Southern California Edison11 Unplanned Web Governance Landscape Company.com MyHR Site Employee Site eProcurement B2C B2B B2E Parent.com BU 1 Shared Services ITBU 2 Corp Center BU 3 Business Unit Governance Board Look & Feel Standards Application Technology Decision Matrix Style Guide Web Master Manual Standards & Guidelines for Communications Buysite Customization Standards & Guidelines Portals Style Guide Standards & Guidelines for Communications Style Guide Application Technology Decision Matrix Business Unit Governance Board Business Unit Governance Board

12. Southern California Edison12 Governance Boards Planning works well when community members recognize how the parts of the community fit together.

13. Southern California Edison13 Web Governance Boards Business Unit Boards Web Governance Boards Executive Level BU 1 Shared Services IT B2C Portal B2B Portal B2E Portal ETC BU 2 Corp Center How do web communities fit together to align Business and IT Plans? BU 3

14. Southern California Edison14 Governance Boards Good planning considers the needs of the entire community. Once planners have helped the community create its plan, they work with many people and groups to carry out the plan. They work with neighborhood groups, the mayor, the police, engineers, and business people, as well as many others to make the community the best place to live.

15. Southern California Edison15 BU 1 Intranet Governance Board Systems Engineering IT Security Web Production Support Application Services eBusiness Enterprise Architecture BU 2 Intranet Governance Board IT Intranet Governance Board BU 3 Intranet Governance Corporate Center Intranet Governance Shared Services Intranet Governance System Quality Assurance B2E Governance Board BU 1 Internet Governance BU 2 Internet Governance Public Affairs Human Resources Safety Community Involvement B2C Governance Board Corporate Finance IT Support/Alignment Law Corporate Communications Corporate Alignment Web Governance Boards

16. Southern California Edison16 In a Phased Approach General Governance Principles Why Govern? At the Community Level What is Governance?Where? Who?When?How do we Govern? To Improve an environment via Planning Rules & Their Enforcement In a Phased Approach In collaboration with the Business, IT Infrastructure & IT Appl Services By Establishing & Monitoring adherence with Standards, Guidelines & Processes

17. Southern California Edison17 Governance Board Responsibility As the population increases and becomes more concentrated in certain areas of the country, carefully planned development is the only way to ensure that the quality of life in those areas is maintained and enhanced. Much of the responsibility for promoting and maintaining the good life in a community belongs to the city and regional planners.

18. Southern California Edison18 Web Governance Roles & Responsibilities Web Governance Responsibilities Define Guiding Principles for Web Content & Design Define Responsibilities of Content Owners Establish Content Management / Approval Process Perform Best Practice Research & Knowledge Sharing IT Role: Business Unit Role: Corporate Role: IT Web Governance Corp. Business Units Standards Establishment / Updates Project Compliance Reviews & Quality Control Gate Web Production Monitoring Web Governance Knowledge Sharing & Communications CONTENT MANAGEMENT TECHNICAL ARCHITECTURE & SUPPORT WEB SITE & CONTENT APPROVAL

19. Southern California Edison19 Governance Planning Professional planners prepare comprehensive plans for development projects, neighborhoods, cities, states and regions… a vision. And they're responsible for developing a plan of action to turn their paper plans into reality - into roads, buildings and open spaces.

20. Southern California Edison20 Change Management Processes/ Standards Technology Content Organization/ Strategy Advocacy/Funding Education/Promotion Communication Strategy -Web Governance Site Best Practices Architecture Standards Branding/Logo Standards Look/Feel Standards Development/Maintenance Technical Standards/Guidelines Security Standards Service Level Agreements Web Change Management Standard Tools Mobility Strategy Developer’s Pool Search Engine Enhancement Single Sign-on Personalization Strategic Alignment Plan Operations -Mission Statement of purpose -Objectives -Membership -Voting -Roles & Responsibilities -Decision Matrix for work -Meeting Manager Shared -Common Taxonomy -Usability -Search Intelligence -Design -Corporate Content Reviews -BU Content Reviews -Portal Metrics -ACT Compliance -Approval -Quality Control & Monitoring Business Unit -Governance Boards -BU Content Review/Clean-up -Business Requirements Portal Governance Strategic Alignment – A Collaborative Vision

21. Southern California Edison21 EDNA Actions - Improvement Initiatives 1.Governance Operations 2.Organizational Change Management / Common Vision 3.Intranet Site Clean-up 4.Intranet Organization & Search 5.Functional Design (Usability) and Style Guide Update 6.Web Content Management 7.Standard Automated Business Processes, Applications & Tools 8.Mobility Standards 9.Release Management 10.Governance Communications - Web Site

22. Southern California Edison22 In a Phased Approach General Governance Principles Why Govern? At the Community Level What is Governance?Where? Who? When? How do we Govern? To Improve an environment via Planning Rules & Their Enforcement In a Phased Approach In collaboration with the Business, IT Infrastructure & IT Appl Services By Establishing & Monitoring adherence with Standards, Guidelines & Processes

23. Southern California Edison23 Web Governance Processes Standards Establishment Development Standards Technical Standards & Guidelines Content Management Standards Architecture Standards Security Standards Maintenance Standards Project Reviews Development & Maintenance Standards Compliance Reviews Technical Guidelines/Standards Reviews Content Reviews Architectural Alignment Reviews Security Alignment Reviews Web Production Monitoring Security Monitoring Service Level / Performance Metrics Monitoring Web Applications Migration Monitoring Web Tools Migration Monitoring Trending & Improvement Initiatives Quality Control Web Governance Approval Gate Web Production Change Management Content Approval Gate

24. Southern California Edison24 Outputs: Standards Road Map Standards Development Plan New/Updated Standards Standards Deployment Entry Criteria: A need for a standard, or to update a standard, is Identified via a change in Web Strategy, Technology, Best Practices or Risk. Inputs: Industry Best Practices Existing Strategies Existing Standards Business Unit Initiatives Standards Establishment Function Development Standards Technical Standards & Guidelines Content Management Standards Architecture Standards Security Standards Maintenance Standards Resources Web Governance Process Management Application Services Systems Engineering IT Security Infrastructure Corporate Communications Exit Criteria: Standards Road Map & Development Plan Approval Standards are Deployed Dependencies: Architectural Strategy Web Strategy

25. Southern California Edison25 Project Review Function Resources Web Governance System Quality Assurance Systems Engineering Corporate Communications Project Reviews Function Development & Maintenance Stds Compliance Reviews Technical Guidelines/Standards Reviews Content Reviews Architectural Alignment Reviews Security Alignment Reviews Entry Criteria: A project requires a review to verify compliance with standards. Inputs: Web Development Projects Development Standards Maintenance Standards Technical Standards & Guidelines, Architectural and Security Standards SQA Review Checklists Dependencies: Established Standards Web Projects Outputs: Exit Criteria: Deviations identified and addressed prior to migration to the Production Environment Web Content Issues Log Application Development Project Issues Log Findings & Recommendations Report Action Plans for Issues requiring resolution for Project Implementation

26. Southern California Edison26 Web Production Monitoring Resources Web Governance Web Production Support IT Security Management Corporate Communications Application Services Web Production Monitoring Function Security Monitoring Service Level / Performance Metrics Monitoring Web Applications Migration Monitoring Web Tools Migration Monitoring Trending & Improvement Initiatives Entry Criteria: Reports are published and it is time for scheduled Governance Monitoring activities. Inputs: Security Reports SLAs & Metrics Reports Web Content Issues Log Governance Board Issues Log Web Governance Reports Dependencies: SLAs Issues Log & Reports Outputs: Web Governance Monitoring Summary including an Issues Log with Recommended Actions Web Content Issues Report Improvement Initiatives Exit Criteria: Web Governance Monitoring Summary and Improvement Initiatives published Issues are addressed

27. Southern California Edison27 Quality Control Function Web Governance Approval Gate Web Production Change Management Content Approval Gate Resources Web Governance Web Production Support Corporate Communications Application Services Entry Criteria: A Web Application requires migration to production. Inputs: Web Migration Request SDM & Client Approval (UAT) for Release to Production Web Production Content Approval for Release to Production Inventory of Web Applications in Production Web Migration Activity Reports Dependencies: Change Request Approval for Migration Web Production Reports Outputs: Approved Application is Migrated to Web Production Approved Content is Migrated to Web Production Inventory of Web Applications in Production Archived Web Content History Exit Criteria: Application or Content is successfully migrated to the Web Production Environment

28. Southern California Edison28 In a Phased Approach General Governance Principles Why Govern? At the Community Level What is Governance?Where? Who?When? How? To Improve an environment via Planning Rules & Their Enforcement In a Phased Approach In collaboration with the Business, IT Infrastructure & IT Appl Services When? By establishing & monitoring adherence with Standards, Guidelines & Processes

29. Southern California Edison29 Web Governance in a Phased Approach Standards Establishment Development Standards Technical Standards & Guidelines Content Management Standards Architecture Standards Security Standards Maintenance Standards Governance Establishment Develop Governance Model Communications Plan Standards Gap Analysis Implementation Plan Governance Boards Obtain Sponsorship & Mgt Support Identify Content Owners Develop Charter & Vision Define Roles & Responsibilities Define Board Structure & Operations Web Production Monitoring Security Monitoring Service Level / Performance Metrics Monitoring Web Applications Migration Monitoring Web Tools Migration Monitoring Trending & Improvement Initiatives Project Reviews Development & Maintenance Stds Compliance Reviews Technical Guidelines/Standards Reviews Content Reviews Architectural Alignment Reviews Security Alignment Reviews Quality Control Web Governance Approval Gate Web Production Change Management Content Approval Gate Phase 1 Phase 5*Phase 4Phase 3 Phase 2 * - Note: Dependencies on a Security Framework, SLAa and a controlled Web Production Environment exist in this area.

30. Southern California Edison30 Web Governance Operations 1.Annual Planning - Risk Assessment & Review of Industry Trends 2.Alignment of IT & BU Strategies 3.Develop/Refine Safeguards to Eliminate Risk  Web Policies  Standards & Processes  Development Project Reviews  Production Environment Monitoring  Change Control Gate 4.Measure Performance / Compliance 5.Report on Results & Create Improvement Initiatives 6.Educate, Communicate and Inform IT & BUs in Web Governance Practices 7.Continuously Improve Web Governance

31. Southern California Edison31 Web Governance Key Success Factors 1.Ensure that Executive Management supports Governance 2.Ensure that well defined Business & IT Strategies exist 3.Ensure alignment of Strategies at the Portal Level with Boards that represent the appropriate individuals in each portal community 4.Ensure that Standards are Comprehensive, Developed by Subject Matter Experts and are Approved 5.Ensure that reviews are conducted at High Risk points in the SDLC (i.e. Requirements, Design, Testing, etc.) 6.Ensure that Web Production is monitored for security risks & reliability and proper escalation processes & recovery plans exist 7.Ensure that well defined processes for Web Change Management exist

32. Southern California Edison32 Web Governance "Never doubt that a small group of thoughtful committed citizens can change the world; indeed, it's the only thing that ever has. " ~Margaret Mead