2 GITO - Overview - ITGovernance

8/12/2019 2 GITO - Overview - ITGovernance

1/23

t t kelol

OVERVIEW OF IT GOVERNANCE

Governance of IT Outsourcing


2/23

t t kelol

Information


2

Information is a key resource for all enterprisesInformation is created, used, retained, disclosed anddestroyed

Technology plays a key role in these actionsTechnology is becoming pervasive in all aspects ofbusiness and personal life

What benefits does information and technologybring to enterprises?

copyright @ 2012 TataKelola


3/23

t t kelol

Enterprise Benefits


3

Enterprises and their executives strive to:

Maintain quality information to support business decisionsGenerate business value from IT-enabled investments, i.e. achievestrategic goals and realise business benefits through effective andinnovative use of ITAchieve operational excellence through reliable and efficientapplication of technologyMaintain IT-related risk at an acceptable level

Optimise the cost of IT services and technologyHow can these benefits be realized to create enterprisestakeholder value?



4/23

t t kelol

IT Governance Principles


ISO/IEC 38500:2008 Corporate governance ofinformation technology :

Framework

Principle 1 : ResponsibilityPrinciple 2 : StrategyPrinciple 3 : Acquisition

Principle 4 : PerformancePrinciple 5 : ConformancePrinciple 6 : Human Behaviour

4



5/23

t t kelol

IT Governance Principles Framework


The Model of ISO/IEC 38500:2008

5



6/23

t t kelol

IT Governance Principles Framework


The Model of ISO/IEC 38500:2008

Directors should govern IT through three main tasks:Evaluate the current and future use of IT.Direct preparation and implementation of plansand policies to ensure that use of IT meetsbusiness objectives.

Monitor conformance to policies, andperformance against the plans.

6



7/23t t kelol



Principle 1 : Responsibility

Individuals and groups within the organizationunderstand and accept their responsibilities inrespect of both supply of, and demand for IT.Those with responsibility for actions also have theauthority to perform those actions.

7



8/23

t t kelol



Principle 2 : Strategy

The organizations business strategy takes into

account the current and future capabilities of IT; thestrategic plans for IT satisfy the current andongoing needs of the organizations businessstrategy.

8



9/23

t t kelol



Principle 3 : Acquisition

IT acquisitions are made for valid reasons, on thebasis of appropriate and ongoing analysis, withclear and transparent decision making. There isappropriate balance between benefits,opportunities, costs, and risks, in both the short termand the long term.

9



10/23

t t kelol



Principle 4 : Performance

IT is fit for purpose in supporting the organization,providing the services, levels of service and servicequality required to meet current and future businessrequirements.

10



11/23

t t kelol



Principle 5 : Conformance

IT complies with all mandatory legislation andregulations. Policies and practices are clearlydefined, implemented and enforced.

11



12/23

t t kelol



Principle 6 : Human Behaviour

IT policies, practices and decisions demonstraterespect for Human Behaviour, including the currentand evolving needs of all the people in theprocess.

12



13/23

t t kelol

Governance Objectives


13



14/23

t t kelol

IT Governance


14



15/23

t t kelol

Governance & Management


15

Governance

Governance ensures that enterprise objectives are achievedby evaluating stakeholder needs, conditions and options;setting direction through prioritisation and decision making;and monitoring performance, compliance and progressagainst agreed direction and objectives [EDM]

Management

Management plans, builds, runs and monitors activities inalignment with the direction set by the governance body toachieve the enterprise objectives [PBRM]



16/23

t t kelol

Governance & Management Process


16



17/23

copyright @ 2012 TataKelolaGovernance of IT Outsourcing17


18/23

t t kelol

COBIT 5 Evaluate, Direct, Monitor


18



19/23

t t kelol

COBIT 5 Align, Plan, Organise


19



20/23

t t kelol

COBIT 5 Build, Acquire, Implement


20



21/23

t t kelol

COBIT 5 Deliver, Service, Support


21



22/23

t t kelol

COBIT 5 Monitor, Evaluate, Assess


22



23/23

Documents

2 GITO - Overview - ITGovernance