Strategy and Tactics to Achieve Effective IT Governance

1
Strategy and Tactics to Achieve Effective IT
Governance

• Kerry Litten

2
What it is

• The process of identifying what IT should do in
  terms of
• New initiatives( e.g. new/amended services or
  applications)
• Improving/maintaining current performance (e.g.
  improving security, increasing capacity or
  improving resilience)
• Allocating resources (primarily money and staff
  time, but also assets and facilities) to achieve
  the selected goals

3
Why it is important
4
Who should participate
Business and IT Stakeholders
5
Strategy

• Step 1 - Define the decision criteria
• Step 2 - Decide who will make the decisions
• Step 3 - Define the IT governance process

6
Define the decision criteria

• Strategic Alignment
• Value Delivery
• Risk Management

7
Decide who will make the decisions
Ref IT Governance, Peter Weill Jeanne W. Ross,
2004, Page 59
8
Define the IT governance process
9
Tactics

• Step1 Create/Review and implement IT principles
• Step 2 Define/Review IT architecture and
  enforce it
• Step 3 Ensure that IT services and processes
  are governable
• Step 4 Set targets

10
Create/Review and implement IT principles

• Example principles
• Application development is out-tasked to a small
  number of trusted third parties
• The IT architecture should enable rapid scaling
  up or down of IT services capacity
• Procedures must demonstrably minimize risk of
  non-compliance with external regulations
• Example policy
• Application development contracts may only be
  placed with companies on the approved list

11
Define/Review IT architecture and enforce it

• Example policies
• All customer-facing applications will be hosted
  in both the live and backup data centres
• Wireless networks will be deployed within all
  locations for end user access to applications
• Application firewalls will be used to protect
  against the inclusion of confidential data in
  Instant Messenger conversations

12
Ensure that IT services and processes are
governable

• Consistent operational service delivery and
  service management processes
• Measurement of service performance (service
  levels)
• Measurement of process parameters (e.g.
  infrastructure utilisation for capacity
  management)
• Measurement of metrics for
• Strategic Alignment
• Value Delivery
• Risk Management

13
Set targets

• Targets for the performance of IT service
  management processes
• Targets for improvement in measurements of
• Strategic Alignment
• Value Delivery
• Risk Management

14
(No Transcript)