IT govenence

1. INFORMATIONTECHNOLOGYGOVERNANCE
CSKSEMINAR
MONDAY 21 ST MARCH 2022
Peter Owenje B.Sc, MBA

2. AGENDA
• What is IT Governance
• Elements of IT Governance
• Benefits of IT Governance
• Frameworks for IT Governance
• Auditing IT Governance
• Role of Internal Audit

3. Objectives
• Overview of IT Governance and describe its importance
• An Approach to auditing IT Governance, including key
scope areas, involved parties/stakeholders, key questions
to answer
• Current trends in IT Governance and how they can be
incorporated into IT Governance audits

5. COBIT
• Definition of Control Objectives for Information and Related Technologies.
Control Objectives for Information and Related Technologies, more popularly
known as COBIT, is a framework that aims to help organizations that are looking
to develop, implement, monitor, and improve IT governance and information
management.
• Componets of COBIT : Framework. Organize and categorize IT governance objectives
and good practices by IT domains and processes before associating them with
their respective business requirements.
• Process descriptions. …
• Control objectives. …
• Management guidelines. …
• Maturity models.

6. Elements of IT Governance

7. Elements of IT Governance
• IT Strategic Alignment, such as formalized business
objectives, up to date IT strategy, linkage between business
objectives and IT initiatives;
• Value Delivery: IT tactical plans, clear benefits for each level
of the organization: infra-structure (systems uptime),
applications (degree of automation), operational (productivity),
financial (income);
• Risk Management: defined responsibilities for risk
management, risk analysis methodology, defined strategies for
addressing risks, continuous monitoring of threats,
occurrence and impact;

8. Elements of IT Governance
• Resource Management: sourcing strategies, human
management practices, user manuals, segregation of
duties, time reporting, infra-structure life cycle
management, acceptable usage policies.
• Performance Measurement: relevant and measurable
metrics, continuous monitoring and reporting, follow-up
policies, root cause analysis and problem management,
benchmarking against industry practices and proven
standards or frameworks.

9. Benefits of IT Governance
• Strengthens the relationship between the organization
and IT; Helps ensure limited IT resources are focused on
the right strategic and tactical activities at the right time
• Synergies with Enterprise Risk Management (ERM) and
other risk management activities; Helps ensure the
appropriate IT risk management processes and activities
are in place and operating effectively

10. Benefits of IT Governance
• Enhanced visibility into the IT Function’s ability to achieve
its both tactical and strategic objectives; Key
Performance Indicators (KPIs) for day-to-day activities
and longer-term/strategic initiatives
• Improved adaptability of the IT Function to organizational
and IT environment changes; Formality of Governance
structure, processes and activities enables more efficient
and effective response to change

11. Framework For IT
Governance
• Capability Maturity Modeling Integration (CMMI)- For Process
Improvement
• Information Technology Infrastructure Library (ITIL)- For IT Service
Management.
• Six Sigma- For Process Improvement especially security processes.
• Control Objectives for Information and Related Technology(COBIT)
For information technology (IT) management and IT governance
• The Balanced Score Card (BSC), Balanced Scorecard (BSC) -
method to assess an organization’s performance in different areas.

12. Framework For IT
Governance

13. Auditing IT Governance
Institutional Governance Structures

14. Auditing IT Governance
Executive Leadership and Support

15. Auditing IT Governance
Strategic and Operational Planning

16. IT Organization(s) and Risk Management
Auditing IT Governance

17. Auditing IT Governance
Service Delivery and Management

18. IT Governance Trends
• Cost Efficiencies (Outsourcing / The Cloud)
• Information Privacy and Security
• Virtualization
• Centralization vs. Decentralization

19. Information Security Governance Model

20. Information Security Governance with Stakeholders

21. Information Security Governance to Provide Customer Value

22. Information Security Governance Management Implementation Model

23. Information Security Governance for Mobile Devices

24. Information Security Governance to address cyber threats

25. Enterprise Information Security Governance Council

26. Business Information Security Governance Process

27. END