Technology Governance: Smart, Sexy and Simple in Seven Steps
0 likes988 views
The document outlines a 7 step process for implementing technology governance within an organization: 1) Planning, 2) Implementation, 3) Deployment, 4) Management, 5) Support, 6) User adoption, and 7) Training. It emphasizes that technology decisions should align with and further the organization's strategic goals and mission. An effective technology governance framework requires leadership, clear organizational structures, and defined processes to ensure accountability, deliver value, and facilitate strategic alignment and risk management discussions between business and IT stakeholders.
Technology Governance: Smart, Sexy and Simple in Seven Steps
- 1. Technology Governance Smart, Sexy, and Simple in Seven Steps 12NTCtechgov Johan Hammerstrom Community IT Innovators
- 2. Evaluate This Session! Each entry is a chance to win an NTEN engraved iPad! or Online at www.nten.org/ntc/eval
- 3. Johan Hammerstrom Vice President Community IT Innovators johan@citidc.com @JohanCITI 12NTCtechgov Slide 2
- 4. Disclaimer Smart? I’ll do my best Sexy? Don’t count on it Simple? That’s my goal 12NTCtechgov Slide 3
- 5. Alphabet Soup ISO-9000 ITGI photo: Wikimedia Commons 12NTCtechgov Slide 4
- 6. Take-aways 1. Why business objectives should drive all technology decisions 2. Why user adoption and support is critical to all technology management 3. A usable technology governance outline that can be used within your organization today 12NTCtechgov Slide 5
- 7. the 7 Steps 1. Planning 2. Implementation 3. Deployment 4. Management 5. Support 6. User adoption 7. Training 12NTCtechgov Slide 6
- 8. Process 1. Planning 2. Implementation 3. Deployment 4. Management 5. Support 6. User adoption 7. Training 12NTCtechgov Slide 7
- 9. 50,000 foot view photo: Wikimedia Commons 12NTCtechgov Slide 8
- 10. Purpose Organizations exist for a purpose. MISSION 12NTCtechgov Slide 9
- 11. Corporate Governance The system by which companies are directed and controlled… Cadbury Report, 1992 to achieve their purpose. 12NTCtechgov Slide 10
- 12. IT Governance The leadership and organizational structures and processes that ensure that the organization’s IT sustains and extends the organization’s strategies and objectives. ITGI, 2006 12NTCtechgov Slide 11
- 13. IT Governance redux The systems d organizational structures and processes that ensure that the organization’s IT sustains and extends the organization’s strategies and mission. revised ITGI, 2012 12NTCtechgov Slide 12
- 14. essentials 1. Leadership 2. Organizational Structures 3. Processes 12NTCtechgov Slide 13
- 15. Governance Maturity “optimized” “managed” “defined” “ad-hoc” “none” 12NTCtechgov Slide 14
- 16. COBIT Control Objectives for IT source: COBIT 5 12NTCtechgov Slide 15
- 17. Control? Well-planned well-implemented well-maintained 12NTCtechgov Slide 16
- 18. source: COBIT 5 12NTCtechgov Slide 17
- 19. COBIT Principles source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 18
- 20. Strategic Alignment Business Goals Requirements Information IT Goals IT Processes source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 19
- 21. Strategic Alignment Mission Requirements Information IT Goals IT Processes source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 20
- 22. Mission IT Goals Information IT Processes • Outcome measurements • Performance Metrics • Messaging • Website • Files • Databases • Internet Access 12NTCtechgov Slide 21
- 23. Mission Requirements IT Goals IT Processes • Business Continuity • Reporting • Compliance • Automation/efficiency • Remote access • Support • COST 12NTCtechgov Slide 22
- 24. Strategic Alignment Dialogue Business Goals Requirements Information IT Goals IT Processes source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 23
- 25. Strategic Alignment Business Goals IT Goals IT Processes 1. Leadership willing and able to have dialogue 2. Organizational Structures that enable the conversation 3. Processes that support it 12NTCtechgov Slide 24
- 26. Process Business Goals IT Goals 1.Planning IT Processes 2.Implementation 3.Deployment 4.Management 5.Support 6.User adoption 7.Training 12NTCtechgov Slide 25
- 27. Dialogue around… source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 26
- 28. Key Decisions 1. What resources are required? 2. What risks are tolerable? 3. What measurements are needed? source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 27
- 29. Required Resources 1. Specific systems 2. Support staff 3. Training 4. Hosting 5. Infrastructure source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 28
- 30. Tolerable Risks 1. Business Continuity 2. Disaster Recovery 3. RPO 4. RTO 5. Hacking threats 6. Malware 7. Spam 12NTCtechgov Slide 29
- 31. Measurements Needed 1. Reporting requirements 2. Compliance requirements 3. Management 4. Performance metrics 5. Project status 12NTCtechgov Slide 30
- 32. Simple Risk Matrix Tape Availability Hosted Backup RTO 1-2 weeks 1 hr n/a RPO 1-7 days 15 min 1 day Retention 6 months 3 months 3 weeks Reports Custom Custom Limited Cost $10,000 $20,000 $15,000 12NTCtechgov Slide 31
- 33. Simple Risk Matrix Tape Availability Hosted Backup Down for… 1-2 weeks 1 hr n/a Lost data… 1-7 days 15 min 1 day Retention 6 months 3 months 3 weeks Reports Custom Custom Limited Cost $10,000 $20,000 $15,000 12NTCtechgov Slide 32
- 34. Accountability source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 33
- 35. Value Delivery Business Goals IT Goals IT Processes 1. Leadership exercising oversight 2. Organizational Structures that enable the accountability 3. Processes that deliver value 12NTCtechgov Slide 34
- 36. Process Business Goals IT Goals 1.Planning IT Processes 2.Implementation 3.Deployment 4.Management 5.Support 6.User adoption 7.Training 12NTCtechgov Slide 35
- 37. lifecycle Key Decisions source: COBIT 4.1 Executive Summary 12NTCtechgov Slide 36
- 38. Accountability 1. How will leadership know if IT is delivering value? a) Metrics? b) Reports? 2. Is responsibility clearly defined? a) SLA b) Policy 12NTCtechgov Slide 37
- 39. In closing… 1. Start with Strategic Alignment 2. Create Dialogue around… a) Resource Management b) Risk Management c) Performance Measurement 3. Identify Value Delivery through a) Accountability b) Regular reports? 12NTCtechgov Slide 38
- 40. Resources • www.isaca.org • www.citidc.com/ntc2012 • johan@citidc.com • @JohanCITI 12NTCtechgov Slide 39
- 41. Evaluate This Session! Each entry is a chance to win an NTEN engraved iPad! or Online at www.nten.org/ntc/eval