Enterprise IT Strategy Plan
Running head: TECHNOLOGY GOVERNANCE PLAN 0
Information Technology Governance Framework
Sahaboob Yassin
ENT/586
June 19, 2017
Dr. Louay Chebib, PhD
Introduction
Information technology governance is a subgroup field of organizational governance which focuses on information and technology, its performance as well as risk assessment. It should be noted that focus on information and technology governance is based on the increasing need within organizations to enhance value creation efforts onto the organization’s strategic goals and that of improving the management of individuals performing those strategic objectives (Van Grembergen, 2004). Information and technology(IT) governance framework, on the other hand, is designed to isolate, establish and interlink methodologies to regulate the application of information and technology to add value while controlling the risks related to the application of information and technology (Nada & Andrew, 2001). Basically, IT governance involves the specification of decision rights and responsible framework to enhance a desirable performance in the application of IT (Van Grembergen, 2008). The pages below have described IT governance framework, ethical considerations in the IT control process and a description of how IT would be used to enhance strategic planning in a business.
Information and Technology Governance/Management Framework
As it was earlier mentioned, IT governance framework comprises of delegating decisions rights and responsibilities, this section will begin by outlining the levels of management which will be involved in governing IT framework. It should be noted that IT governance will be situated at a number of levels in the organization’s management: at a strategic level where the board of governors and directors will be involved in oversight roles; at the management layer where the executive management such as the CEO’s, CIO’s, CFO’s among others will be involved in decision making, and lastly IT governance will be situated at the operational level where there will be both IT and corporate management (Van Grembergen, 2008). As result, there is the need for all levels of the business to get involved in IT governance and that they clearly understand their roles and responsibilities in IT governance framework.
IT Governance Framework
Since IT governance focuses on IT’s provision of value to the business while managing risks and enhancing accountability, the framework will focus on value delivery; strategic placement; resource, risk, and performance management. The organization will developed an IT governance framework using ISACA’s (Information Systems Audit and Control Association) COBIT (Control Objectives for Information and Related Technologies) model which describes a group of practices for management, regulation and assurance of IT as well as organizing them around a logical outline (Van Grembergen & De Haes, 2009). This model IT governance was identified since it facilitates the information and related technology governance and management in a universal form for the whole business, by taking in the entire end-to-end business and operational areas of accountability, taking note of the IT-related interests of all stakeholders.
It should be noted that the IT governance framework will be based on three different concepts of corporate goals/IT objectives and Information Criteria, IT processes, and IT resources (Van Grembergen & De Haes, 2009).
Business Objectives/IT Goals and Information Criteria
In order for the business to satisfy the needs of consumers, the information which will be provided by the IT department to the business and the processes involved should adhere to some level of quality as described by COBIT. These information criteria which will be considered at the aforementioned management levels will be based on:” effectiveness, efficiency, confidentiality, integrity, availability, compliance and reliability”, (Van Grembergen & De Haes, 2009).
IT Processes
For the IT governance framework to be effective, the management and oversight teams will be involved in a number of processes to ensure that the needs of the business, consumers and general stakeholders are satisfied.
To begin, IT governance will be involved in aligning, planning and organizing processes. Therefore managers will have the responsibilities of to regulate the IT management outlines; manage strategies, innovations, portfolio, and relationships within and without the business, service contracts, quality of services, as well as risk and security issues related to information and technology;
Secondly, the IT governance framework will include the build, acquire and implement processes, where the three levels of management will be required to oversee programs and projects, control IT requirements, manage solutions, control IT availability and capability, manage the knowledge of the users, control IT assets as well as manage configuration.
Thirdly, IT governance framework is comprised of the delivery, service and supporting process which is concerned with managing IT and business operations, managing problems, ensuring business and IT continuity, controlling security operations and lastly controlling corporates’ process controls.
The last process within the IT governance framework is involved in monitoring, evaluating and assessing the progress of IT processes. Responsibilities stipulated under this category are related to monitoring, evaluating and assessing IT productivity and conformance, internal control systems, and IT’s agreement with external provisions (Van Grembergen & De Haes, 2009). It should be remembered that the highlighted management functions are some of the 34 processes included in COBIT’s IT governance framework.
IT Resources
For an efficient response to IT requirements, the business will invest in resources which according to COBIT model are classified into applications both manual and automated procedures involved in processing information; information in different forms; infrastructure such as hardware, software management systems, connectivity, and human resource involved in planning, organizing, acquiring, implementing, delivering, supporting, monitoring and evaluating the information and technology structures as well as services(Khther & Othman,2013).
Ethical Consideration in IT Governance Processes
It should be remembered that business decisions are usually a reflection of ethical standards and values which result in the success or failure of the business. Positive ethical values are a result of business managers and governors who adopts discretional decisions to deliver their duties as provided by laws governing the businesses and as required by stakeholders. Some of the ethical considerations which will be conducted in the IT governance process will include the protection of consumers' confidential information's, enhancing integrity in all processes, ensuring that there is transparency, especially during the acquisition processes by avoiding financial frauds. Additionally, during decision-making processes, ethical issues in the contexts of social, economic, political and technical in regards to information technology will be considered (Doridot, 2013).
Overview of IT Governance Influence on Strategic Planning
The consequence of efficient IT governance is that it empowers consumers in identifying what they want to purchase and at the same time delivering its promises. In other words, effective IT governance is expected to be consumer based such that it offers good value and capitalizing in its own capacities to make sure it remains viable in the future while empowering the workers without risks of losing power. Operational IT governance framework will play an important role during strategic planning by promoting the generation of flexible, economical, and incorporated strategic objectives which the employees are committed to achieving, development of a clear description of short and long term strategic aims, objectives and projects. Additionally, IT governance will promote an all-inclusive, shared, and externally surveyed and decision-making process, as well as provide a data-oriented and a measurable strategic corporate plan which demonstrates organizational strategic plan.
Conclusion
Over the course of business development, IT governance and management will need to be adjusted and modified to satisfy the needs of consumers and business environments, depending on the issues which will perform effectively and those that will not function as expected.
References
Doridot, F. (Ed.). (2013). Ethical Governance of Emerging Technologies Development. Igi Global.
Khther, R. A., & Othman, M. (2013). COBIT framework as a guideline of effective IT governance in higher education: a review. International Journal of Information Technology Convergence and Services, 3(1), 21.
Nada Korac‐Kakabadse, Andrew Kakabadse, (2001) "IS/IT governance: need for an integrated model", Corporate Governance: The international journal of business in society, Vol. 1 Issue: 4, pp.9-11, https://doi.org/10.1108/EUM0000000005974
Van Grembergen, W. (Ed.). (2007). Implementing Information Technology Governance: Models, Practices and Cases: Models, Practices and Cases. IGI Global.
Van Grembergen, W., & De Haes, S. (2009). Enterprise governance of information technology: achieving strategic alignment and value. Springer Science & Business Media
Van Grembergen, W. (Ed.). (2004). Strategies for information technology governance. Igi Global.