Module 5
Module 5
IT governance framework
The most commonly used frameworks are:
COSO: This model for evaluating internal controls is from the Committee of
Sponsoring Organizations of the Treadway Commission (COSO). COSO’s focus
is less IT-specific than the other frameworks, concentrating more on business
aspects like enterprise risk management (ERM) and fraud deterrence.
CMMI: The Capability Maturity Model Integration method, developed by the
Software Engineering Institute, is an approach to performance improvement.
CMMI uses a scale of 1 to 5 to gauge an organization’s performance, quality and
profitability maturity level. According to Calatayud, “allowing for mixed mode and
objective measurements to be inserted is critical in measuring risks that are
qualitative in nature.”
FAIR: Factor Analysis of Information Risk (FAIR) is a relatively new model that
helps organizations quantify risk. The focus is on cyber security and operational
risk, with the goal of making more well-informed decisions. Although it’s newer
than other frameworks mentioned here, Calatayud points out that it’s already
gained a lot of traction with Fortune 500 companies.
Steps to implement successful IT governance
Implementing successful IT governance requires a multi-step process that
ensures value creation for your business.
The initial step is preparation, which involves engaging all stakeholders critical
to the company’s smooth operation. This group includes senior IT managers,
customers, employees, and partners. It’s essential to clearly define tasks and
responsibilities for each party to foster an IT strategy that contributes to the
company’s value creation. Setting priorities and determining which team
members will manage IT resources are also key components of this stage.
Next, it’s vital to develop an effective action plan that addresses specific IT
challenges and projects, while ensuring that the IT governance objectives are
in harmony with the business’s goals for value creation. Maintaining focus on
strategic goals during the IT governance setup is vital and for that, you need
to plan a long-term roadmap.
The communication of the IT governance plan completes the implementation.
All stakeholders should be informed of the IT governance plan to facilitate its
implementation.
IT for competitive advantage
Efficiency
IT can automate and streamline business processes, which can reduce
costs and improve efficiency.
Customer service
IT can help companies collect and analyze customer data, which can lead
to more personalized and responsive customer service.
Decision-making
IT can provide real-time data, analytics, and reporting, which can help
companies make faster and more informed decisions.
Product innovation
IT can provide insights into customer preferences, market trends, and
emerging technologies, which can help companies develop new products
and services.
Product differentiation
IT can help companies differentiate their products or services through
features, performance, style, design, consistency, durability, reliability, or
maintainability.
Services differentiation
IT can help companies differentiate their services through speed,
convenience, or care.
Role of Information Systems in Business¶
Despite the huge number of software applications out there, they mainly
serve three key purposes in business:
IT portfolio management
What is ITPM?
Centralized control
Cost reduction
More effective communication with business executives
Increased return on investment (ROI)
Enhanced customer service
Respect among professional peers
Competitive advantage
IT infrastructure aligned with business objectives
Better decision-making
SCM includes all activities that turn raw materials into finished goods and put them into
customers’ hands.
Supply chain management definition
Supply chain management includes all activities that turn raw materials into finished goods
and put them into customers’ hands. This can include sourcing, design, production,
warehousing, shipping, and distribution. The goal of SCM is to improve efficiency, quality,
productivity, and customer satisfaction.