Brief words in governance – D1
• Compliance defines governance.
• Value Risk Alignment.
• Agility, Synergy, Autonomy.
• Are we doing the right thing?
• Duopoly.
• Cobit is a top down view.
• Cobit is a top to bottom shop.
• Cobit is a control framework for information.
• Cobit has detailed instructions on what to do? Not how to do it.
• Cobit & ITIL are mapped on what to do / how to do it
• IT should prompt the business to approve IT initiatives.
• Always assign a business executive for each project, monitor business metrics.
• EA is a Standard, Discipline (job), Tool for alignment and a Best practice.
• It took ING bank 6 years to reach maturity of IT value.
• Solvay did it by: o Build a skill catalogue. o Build a capacity sheet. o Pick skills + estimated time for each project.
• Demand and supply process has no specific standard.
• Outsourcing now is being used to achieve innovation.
• Define business objectives from outsourcing.
• IT has to do its performance metrics as any other business unit.
• If you can measure you can manage.
• Balance score cards require effort.
• IT score card is the last step of defining IT goals.
• Mapping metrics to IT : o Fewer measures are better. o Measure IT in business terms not technical terms. o Do business impact analysis for IT metrics.
• ING bank has applied Net Present Value for IT this is a business metric!!
• Control is: nothing is going wrong.
• Internal control is management.
• Embed IT within the business not align.
• Confusion exists between Governance & Management, Security & Quality, Risk & Control.
• Establish communication with management on hot issues.
• Do post implementation assessment.
• When enforcing policies remove the unused policies, when users find a policy unmonitored they will behave as if all policies are unnecessary.
• Every policy with value should exist; very