LPMN IT Governance and Project Management CCH

Your Gateway to Project Management Success

Managing IT Governance Implementation Projects

November 12th, 2015


#IT Governance @LPMN_ca @CarlosChalicoT

Robert Frost

“The brain is a wonderful organ; it starts working the moment you get

up in the morning and does not stop until you get into the office”



Carlos Chalico 18+ years

CISA CISSP CISM

ISO27001LA

CGEIT CRISC PbDA



Agenda

• Understanding basic concepts – Governance

– IT Governance

• Frameworks – ISO 38500

– COBIT

• Implementing COBIT

• Interaction with PMBOK 10 Knowledge Areas











Governance

“Governance is the act of governing. It relates to decisions that define expectations, grant power, or verify performance. It consists of either a separate process or part of decision-making or leadership processes. In modern nation-states, these processes and systems are typically administered by a government”

Source: Wikipedia



Governance

“Governance is the act of governing. It relates to decisions that define expectations, grant power, or verify performance. It consists of either a separate process or part of decision-making or leadership processes. In modern nation-states, these processes and systems are typically administered by a government”

Source: Wikipedia



Governance

Corporate governance is one key element in improving economic efficiency and growth as well as enhancing investor confidence. Corporate governance involves a set of relationships between a company’s management, its board, its shareholders and other stakeholders. Corporate governance also provides the structure through which the objectives of the company are set, and the means of attaining those objectives and monitoring performance are determined.

Source: OECD



Governance

Corporate governance is one key element in improving economic efficiency and growth as well as enhancing investor confidence. Corporate governance involves a set of relationships between a company’s management, its board, its shareholders and other stakeholders. Corporate governance also provides the structure through which the objectives of the company are set, and the means of attaining those objectives and monitoring performance are determined.

Source: OECD



Other Sources



Key Points

• Relationships – Management – Board – Shareholders – Stakeholders

• Structure • Objectives of the organization • Monitoring performance • Economic efficiency and growth • Confidence

Source: Ernst & Young



Turning Risks into Results

EBITDA: Earnings Before Interest Tax Depreciations and Amortizations EV: Enterprise Value




Turning Risks into Results




So, What’s expected now?



HBR Harvard Business Review

CIO CTO

http://blogs.hbr.org/2013/08/todays-cto-needs-to-become/

http://blogs.hbr.org/cs/2013/07/todays_cio_needs_to_be_the_chi.html
















#IT Governance @LPMN_ca @CarlosChalicoT CIO Information

Innovation

CTO Technology

Transformation




How can this be done?

• Reinforcing effectiveness of internal control

• Increasing efficiency of IT processes

• Identifying, pursuing and preserving the value generated by the IT team

• Properly interacting with business areas

• Managing third parties

• Supporting compliance

• Governing IT



What’s IT Governance

IT governance is an integral part of institutional governance. It consists of the leadership and organizational structures and processes that ensure that the enterprise’s IT sustains and extends the enterprise’s strategy and objectives.

IT Governance is the responsibility of the board of directors and executive management.

Source: CGEIT Review Manual




IT governance is an integral part of institutional governance. It consists of the leadership and organizational structures and processes that ensure that the enterprise’s IT sustains and extends the enterprise’s strategy and objectives.

IT Governance is the responsibility of the board of directors and executive management.

Source: CGEIT Review Manual



In essence, the governance of IT is the theory that enables an organisation’s principal decision makers to make better decisions around IT and, at the same time, provides guidance for IT managers who are tasked with IT operations and the design, development and implementation of IT solutions.




Alison Holt

“Where there is poor organisational governance practice

in place, it will be difficult to implement good IT and

information practice that delivers consistent quality deliverables”



Frameworks

• Alison Holt – New Zealand

– Longitude 174

– Co-chaired ISO’s working group for IT Governance Framework standards

• ISO 38500 – Based on Australian Standard AS 8015-

2005

– Submitted for Fast Track ISO adoption



ISO 38500

Information Technology Processes

Pervasiveness

Guidelines Directors

Senior Executives

Effective Efficient Acceptable

ICT

Goal

ISO 38500 Use

Process 1 Process 2 Process 3 Process n

Source: Governance of IT: An Executive Gude to ISO/IEC 38500; Alison Holt



ISO 38500

Confidence

Stakeholders

Guidelines Directors

Senior Executives

Effective Efficient Acceptable

ICT

Goal

ISO 38500 Use



ISO 38500

IT Governance

IT Management



COBIT

University of Toronto

School of Continuing

Studies

Foundations of Strategic Mgt. of Enterprise IT

Enterprise IT Risk Mgt. & Internal Controls

Enterprise IT Investment & Resource Mgt.

31

50

3

16

0

31

61

Source: http://learn.utoronto.ca/courses-programs/business-professionals/certificates/strategic-management-of-enterprise-it

http://learn.utoronto.ca/courses-programs/business-professionals/certificates/strategic-management-of-enterprise-it
















COBIT

Source: COBIT 5, figure 11



COBIT

IT Governance

COBIT4.0/4.1

Management

COBIT3

Control

COBIT2

Audit

COBIT1

2005/7 2000 1998

Evolu

tion

of scop

e

1996 2012

Val IT 2.0 (2008)

Risk IT (2009)



COBIT Principles




IT Governance and IT Management




COBIT





COBIT



COBIT Implementation

Source: COBIT 5




Source: PMBOK 5th Edition






COBIT




COBIT and Project Management



Conclusions • The world is changing and the IT functions

need to get adapted to that • IT Governance is highly valuable • Complexity in compliance, value

requirements, innovation and transformation needs, support its implementation

• Effective governance requires a committed organisation

• ISO 38500 and COBIT 5 can be the frameworks for implementing this

• IT Governance and Project Management are closely related



Thank you

Carlos Chalico LI, CISA, CISSP, CISM, CGEIT, CRISC, PbDA, ISO27000LA

Ouest Business Solutions Inc.

Director Eastern Region

[email protected]

(647)6388062

@CarlosChalicoT

@carloschalico

mailto:[email protected]

Documents

LPMN IT Governance and Project Management CCH