Menu Expand
Governance of IT

Governance of IT

Alison Holt

(2013)

Abstract

Directors and government ministers across the world are increasingly being held accountable for failed IT systems, data loss and poor decisions about their organisation’s data. This valuable book is designed to bridge the gap between the governing body and CIOs/ IT managers. It will help the reader create a safe and robust governance framework for their organisation by applying the principles of the ISO Governance of IT Standard 38500 on directing, evaluating and monitoring IT activity.
...a very practical walk-through of all the main governance dimensions - people, policies and process - and how to address each in order to be successful.
Adrian Rossi PhD
This book is an excellent companion to the ISO/IEC 38500 standard. It provides guidance on how to implement and maintain effective governance of IT within your organisation. This is an essential reference for anyone in governance or executive management in any organisation.
Rob England
An expert in corporate governance of IT and sustainability management, A. L. Holt is Director and Founder of Longitude 174 Limited and a board member of two charitable trusts. She studied mathematics at Imperial College, London and went on to spent the next 20+ years working internationally in a variety of roles from systems analyst through to CIO. She joined the world of standards development in 2005, and has enjoyed leading a group that identifies market needs, assesses academic research and delivers timely and relevant international standards.
A fascinating take on what too many businesspeople - wrongly - think is a dry subject. Profoundly valuable for any business venture and also engaging and entertaining. I thoroughly recommend it.
Simon Walker
Directors and government ministers across the world are increasingly being held accountable for failed IT systems, data loss and poor decisions about their organisation’s data. The answer lies in IT professionals working in parallel with their governing body to create an environment where information and information systems can be accessed and used by the appropriate stakeholders. Written in two halves, this valuable book is designed to bridge the gap between the governing body and CIOs/ IT managers. It will help them to create a safe and robust governance framework for their organisation by applying the principles of the ISO Governance of IT Standard 38500 on directing, evaluating and monitoring IT activity.
This well written and engaging book…provides thoughtful, practical solutions for managing IT in order to maximize its positive impact and minimize risks.
Craig Nevill-Manning

Table of Contents

Section Title Page Action Price
Cover Cover
Copyright iv
CONTENTS v
LIST OF FIGURES AND TABLES viii
AUTHOR ix
FOREWORD x
ACKNOWLEDGEMENTS xi
ABBREVIATIONS xii
TOOLS AND USEFUL RESOURCES xiii
PREFACE xvi
PART A INTRODUCTION TO THE GOVERNANCE OF IT 1
1 HISTORY OF CORPORATE GOVERNANCE 5
2000 TO CURRENT DAY 10
ORGANISATIONAL GOVERNANCE 11
2 SETTING IT IN THE CONTEXT OF CORPORATE GOVERNANCE 13
3 INTRODUCTION TO THE GOVERNANCE OF IT STANDARD ISO/IEC 38500 17
HOW DID ISO 38500 COME ABOUT? 18
4 THE STANDARD IN DETAIL 21
SCOPE AND OBJECTIVES 21
FRAMEWORK 22
GUIDANCE 34
5 ONGOING DEVELOPMENT WORK 43
GUIDANCE DOCUMENTS 43
HANDBOOKS 47
6 BENEFITS OF GOOD IT GOVERNANCE 49
COST REDUCTION 49
PERFORMANCE IMPROVEMENT 50
ABILITY TO REACT QUICKLY TO MARKET CHANGES 50
BAD THINGS THAT CAN HAPPEN 53
7 REVIEW OF PART A 57
HISTORY 57
THE STANDARD – 38500 58
BENEFITS 59
WHERE TO GO FROM HERE? 60
PART B IMPLEMENTING IT GOVERNANCE 63
8 INTRODUCTION TO IMPLEMENTATION 65
9 BEFORE YOU START ON IMPLEMENTATION 67
BENEFITS REALISATION 67
NEED-GAP ANALYSIS 68
SETTING EXPECTATIONS 73
USING EXISTING DOCUMENTS 74
TAKING AN INVENTORY OF EXISTING GOVERNANCE ACTIVITY 75
TEST AND TRAINING STRATEGIES 78
RECAP 80
10 GETTING THERE – DEVELOPING A PLAN 82
BENEFITS OF THE MODULAR APPROACH 83
EMBEDDING AND COMMUNICATING THE PLAN 83
DEVELOPING ARTEFACTS 84
PROJECT PRIORITISATION AGAINST THE PRINCIPLES 85
REVIEWING THE ORGANISATIONAL CHART AND BUILDING YOUR TEAMS 87
REPORTING ON RISK 90
11 ARRIVING AT THE DESTINATION – EXECUTING THE PLAN 91
PREPARING TO ROLL OUT THE GOVERNANCE FRAMEWORK 91
SUPPORTING SYSTEMS 93
MANAGING PROJECT VERSUS OPERATIONAL WORKLOAD 93
TRAINING AND TESTING 94
PUSHING THE BUTTON 96
12 STAYING THERE – MANAGING THE IT GOVERNANCE FRAMEWORK 99
POST-IMPLEMENTATION REVIEW 100
OPERATIONAL MANAGEMENT 102
MEASUREMENT, MONITORING AND REPORTING 106
STANDARDS, TEMPLATES, GUIDELINES, CHECKLISTS 107
13 MOVING FORWARD – OPTIMISING THE IT GOVERNANCE FRAMEWORK 109
FRAMEWORKS, STANDARDS AND METHODOLOGIES 109
MOVING FORWARD WITHOUT MOVING BACKWARD 111
MEASURING SATISFACTION – REVIEWING PROGRESS 113
BUILDING ON SUCCESS 115
14 REVIEW OF PART B 116
BEFORE YOU START 116
GETTING THERE 117
ARRIVING AT THE DESTINATION 117
STAYING THERE 117
MOVING FORWARD 117
WHERE TO FROM HERE? 117
APPENDIX A THE BOARD REPORT 118
CASCADING BALANCED SCORE CARD EXAMPLE 119
APPENDIX B CHARTER EXAMPLE 121
REFERENCES 123
INDEX 126
Back Cover 129