140 likes | 326 Views
Strategy and Tactics to Achieve Effective IT Governance. Kerry Litten . What it is. The process of identifying what IT should do in terms of: New initiatives( e.g. new/amended services or applications)
E N D
Strategy and Tactics to Achieve Effective IT Governance Kerry Litten
What it is • The process of identifying what IT should do in terms of: • New initiatives( e.g. new/amended services or applications) • Improving/maintaining current performance (e.g. improving security, increasing capacity or improving resilience) • Allocating resources (primarily money and staff time, but also assets and facilities) to achieve the selected goals
Who should participate Business and IT Stakeholders
Strategy • Step 1 - Define the decision criteria • Step 2 - Decide who will make the decisions • Step 3 - Define the IT governance process
Define the decision criteria • Strategic Alignment • Value Delivery • Risk Management
Decide who will make the decisions Ref: IT Governance, Peter Weill & Jeanne W. Ross, 2004, Page 59
Tactics • Step1 – Create/Review and implement IT principles • Step 2 – Define/Review IT architecture and enforce it • Step 3 – Ensure that IT services and processes are governable • Step 4 – Set targets
Create/Review and implement IT principles • Example principles: • Application development is out-tasked to a small number of trusted third parties • The IT architecture should enable rapid scaling up or down of IT services capacity • Procedures must demonstrably minimize risk of non-compliance with external regulations • Example policy: • Application development contracts may only be placed with companies on the approved list
Define/Review IT architecture and enforce it • Example policies: • All customer-facing applications will be hosted in both the live and backup data centres • Wireless networks will be deployed within all locations for end user access to applications • Application firewalls will be used to protect against the inclusion of confidential data in Instant Messenger conversations
Ensure that IT services and processes are governable • Consistent operational service delivery and service management processes • Measurement of service performance (service levels) • Measurement of process parameters (e.g. infrastructure utilisation for capacity management) • Measurement of metrics for: • Strategic Alignment • Value Delivery • Risk Management
Set targets • Targets for the performance of IT service management processes • Targets for improvement in measurements of: • Strategic Alignment • Value Delivery • Risk Management