Foundational IT Governance Framework

Founda'onal  IT  Governance  

A  Founda'onal  Framework  for  Governing  Enterprise  IT   Adapted  from  the  “ISACA  COBIT  5  Framework”    

 

Steven  Hunt  

Enterprise  IT  Governance  Strategist   NASA  Ames  Research  Center  

  Michael  Nelson  

Director  of  Informa?on  Assurance   Logyx,  LLC  

ITG  Presenta'on  Suite   This  presenta?on  is  integral  to  a  series  of  concepts   presented  in  a  suite  of  documents  as  listed  below.    In   order  to  thoroughly  understand  the  aggrega?on  of  the   concepts  presented  it  is  recommended  that  one  review   them  in  order  as  listed:    

•     Fundamental  IT  Governance  Framework  –  Reference   •     Fundamental  IT  Governance  –  Applied  (NASA  &  ARC)   •     Founda'onal  IT  Governance  Framework  –  Reference   •     Comprehensive  IT  Governance  Framework   4/29/12  

2  

Agenda  

•  IT  Governance  Defined   •  Founda?onal  Enterprise    IT  Governance   ‒  What  is  COBIT  /  COBIT  5?   ‒  COBIT  5  Objec?ves   ‒  COBIT  5  Framework   ‒  COBIT  5  Benefits   •  COBIT  5  Principles   –  Principle  1  –  Mee?ng  Stakeholder  Needs   –  Principle  2  –  Covering  the  Enterprise  End-­‐To-­‐End   –  Principle  3  –  Applying  a  Single  Integrated  Framework   –  Principle  4  –  Enabling  a  Holis?c  Approach   –  Principle  5  –  Separa?ng  Governance  &  Management   •  COBIT  Process  Capability  Model   •  Implementa?on  Guidance   •  Summary  &  Recommenda?ons   •  Ques?ons?   •  References   4/29/12  

Founda?onal  IT  Governance  Framework  

3  

IT  Governance  Defined   Governance  

•  Ensures  that  enterprise  objec?ves  are  achieved  by  evalua'ng   stakeholder  needs,  condi?ons,  and  op?ons   •  Sets  direc'on  through  priori?za?on  and  decision  making   •  Monitors  performance,  compliance,  and  progress  against  the   agreed  upon  direc?on  and  objec?ves  

Management  

•  Plans,  builds,  runs,  &  monitors  ac?vi?es  in  alignment  with  the   direc?on  set  by  the  governance  body  to  achieve  the  enterprise   objec?ves  

4/29/12  

Founda?onal  IT  Governance  Framework  

4  

IT  Governance  Defined   Integra'on  of  Governance  &  Management    

•  Dis?nc?on  between  Governance  &  Management  oaen   misunderstood   •  Effec've  integra'on  of  these  two  elements  is  cri'cal  for   successful  IT  Governance  in  any  enterprise  or  organiza?on   •  IT  Governance  is  NOT  responsible  for  “rendering”  IT   infrastructure   •  IT  Governance  IS  responsible  for  “oversight  of  the   management  processes”  that  render  IT  infrastructure  

4/29/12  

Founda?onal  IT  Governance  Framework  

5  

ITG  Primary  Objec'ves   Effec've  IT  Governance  achieves  five  primary  objec'ves:   •  Strategic  Alignment  –      Ensure  IT  is  aligned  with  the  business  –  focus  on  aligning  technology  with  the   business  and  collabora?ve  solu?ons      

•  Value  Delivery  –    Ensure  IT  delivers  value  to  the  business  –  concentra?ng  on  op?mizing   expenses  and  proving  the  value  of  IT      

•  Risk  Management  –    Ensure  IT  manages  risk  –  addressing  the  safeguard  of  IT  assets,  disaster   recovery,  and  con?nuity  of  opera?ons      

•  Resource  Management  –      Ensure  IT  manages  resources  –  realizing  the  op?mal  investment  in,  and   proper  management  of,  cri?cal  IT  resources      

•  Performance  Management  –      Ensure  IT  manages  performance  –  tracking  &  monitoring  strategy   implementa?on,  project  success,  resource  usage,  process  performance,  and   service  delivery     4/29/12  

Founda?onal  IT  Governance  Framework  

6  

Agenda  

•  IT  Governance  Defined   •  Founda'onal  Enterprise    IT  Governance   ‒  What  is  COBIT  /  COBIT  5?   ‒  COBIT  5  Objec?ves   ‒  COBIT  5  Framework   ‒  COBIT  5  Benefits   •  COBIT  5  Principles   –  Principle  1  –  Mee?ng  Stakeholder  Needs   –  Principle  2  –  Covering  the  Enterprise  End-­‐To-­‐End   –  Principle  3  –  Applying  a  Single  Integrated  Framework   –  Principle  4  –  Enabling  a  Holis?c  Approach   –  Principle  5  –  Separa?ng  Governance  &  Management   •  COBIT  Process  Capability  Model   •  Implementa?on  Guidance   •  Summary  &  Recommenda?ons   •  Ques?ons?   •  References   4/29/12  

Founda?onal  IT  Governance  Framework  

7  

Founda'onal  Enterprise  IT  Governance   This  presenta