business governance of enterprise it
DESCRIPTION
TRANSCRIPT
![Page 1: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/1.jpg)
Joseph PonnolyMBA, MSc, CGEIT, CISM, CISA, CISSP
![Page 2: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/2.jpg)
![Page 3: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/3.jpg)
Business & IT
IT projects fail
IT talents and skills
Returns on IT investments
Information risks
IT performance
Quality service delivery
Obsolete Technology
Responsibility for IT
![Page 4: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/4.jpg)
![Page 5: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/5.jpg)
Business IT
![Page 6: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/6.jpg)
Governance
![Page 7: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/7.jpg)
Enterprise System Architecture: Strategy, Business, Information, Systems and Technology. System Architect promotes: Increased Organizational Agility Alignment of Business Processes and IT Systems to Business
Objectives Planning, Modeling, and Execution of Business Processes (BPM) Rapid, Effective and Positive Response to Business Change
Architectural Frameworks The Zachman Framework TOGAF
![Page 8: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/8.jpg)
![Page 9: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/9.jpg)
Enterprise Risk Management (ERM)
HAZARD RISK STRATEGIC
RISK OPERATIONAL
RISK
PEOPLE
PROCESS
TECHNOLOGY
INFORMATION RISK
Risk Defined (LOSS –possibility/probability or exposure)
![Page 10: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/10.jpg)
Risk/Management Internal Control Framework
COSO AS/NZ 4360:2004
Information Risk Management Framework/ Standard:
• ISO 27002- Information Risk Management Standard
• NIST SP 800-30 / 800-53
• CRAMM
• OCTAVE
•FAIR
Dealing with Risk
AVOID
TRANSFER
MITIGATE
ACCEPT
![Page 11: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/11.jpg)
People
Application Systems
Technology
Facilities
Data
IT Resources
![Page 12: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/12.jpg)
Portfolio & Project Management PRINCE 2 and PMBOK Balanced Score Card
![Page 13: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/13.jpg)
![Page 14: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/14.jpg)
![Page 15: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/15.jpg)
![Page 16: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/16.jpg)
![Page 17: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/17.jpg)
Performance Management
Resources management
Risk Management
IT investments value governance
IT Strategy-Business IT alignment
leadership effective organizational
structures business processes
Key Areas
• IT Strategy
•Finance, Budgeting & Investments
•Enterprise Architecture
•Business Analysis
•Solutions Development
•Service Delivery
•Supply Management
•Risk Management
•Compliance
•Resources Management
•Talent Management
•Data Governance
•Performance Metrics/ Balanced Score Card
•Portfolio & Project Management
•Auditing & Assurance
![Page 18: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/18.jpg)
![Page 19: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/19.jpg)
![Page 20: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/20.jpg)
CGEIT (Certified in Governance of Enterprise
IT)
business skills
legal skills
technology skills
Risk management
skills
financial skills
Performance management
Resource management
risk management,
Value delivery
Business – IT strategic alignment
leadership effective organizational
structures business processes
![Page 21: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/21.jpg)
•Creation of an IT strategy that aligns with business strategiesIT Strategy
•Optimization of IT investments using the COBIT/VAL-IT framework using financial engineering concepts and analysis.IT Investment management
•Risk Management using ISO 27002 and the COSO frameworkRisk Management
• Knowledge Management , Information Management, DSS/ Business Intelligence, Technology Architecture & Solutions Management, TrainingResource Management
• portfolio and project management , ITSM, ITIL framework for service delivery, CMMI for software acquisition and implementation maturityPerformance Management
•Implementation of the Balanced Score Card for effective monitoring of IT performance, Performance Metrics
Performance Measurement-Balanced Score Card
•Compliance initiatives for Governance, Risk & Control.Compliance (GRC)
![Page 22: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/22.jpg)
![Page 23: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/23.jpg)
Auditor’s role in IT Governance Assessment & Assurance to Board of Directors & Executive
Management
Auditing IT Governance IT Strategies Value Governance & IT Investments & Finance Management Risk Management Resources Management Performance Metrics
![Page 24: Business Governance Of Enterprise It](https://reader034.vdocuments.site/reader034/viewer/2022051609/5472db15b4af9f980a8b5027/html5/thumbnails/24.jpg)