What is the Value of IT Certification?

“The professional association providing leadership in information systems and technologies.”

What is the Value of IT Certification?

John Boufford, I.S.P., National President

Guy Belleperche, I.S.P., CIPS Ottawa President

January 29, 2007

Professional Practice in Computing (CSI2911)SITE, University of Ottawa


Agenda

• What is a Professional

• We Need Better Systems

• How Do We Get There

• CIPS Will Be Important in Making It Happen


Elements of an IT Professional Designation

Dat

abas

e A

dmin

Sof

twar

e D

evel

op.

Qua

lity

Ass

uran

ce

IT A

udit

Net

wor

k M

gmt.

Oth

er

Pro

ject

Mgm

t.

Ser

vice

Mgm

t.

IT S

ecur

ity …

Core IT Body of Knowledge

Dom

ain

Kno

wle

dgeChoice of Specializations

Code of Ethics & Standards of

Practice

LegislationProfessional Designation (I.S.P.)


Agenda

• What is Professional Certification• We Need Better Systems• How Do We Get There • CIPS Will Be Important in Making It

Happen


Business & Social Need for Better Systems

• Errors Need to Be Reduced

• Reliability Needs to Increase

• Security/Privacy Must Improve


Errors Need to Be Reduced

• Software failures illustrate importance of professionalism– The Hartwell Group identified 20 recent high

profile glitches– 61 + million people affected – $30 + million financial impacts – Non-quantifiable program impacts such as

lost business, privacy, reputation, project delays, additional medical tests, etc.

– Potential Life/Death impacts• Failures can be broadly viewed as

insufficient IT governance


IT Regulatory Compliance

• Regulatory Compliance– Sarbanes-Oxley (SOX)– C-SOX (Proposed)– Privacy Legislation

• All have an impact on IT – See following example


Catalyst for

Projects

Certification of Disclosure in Issuers' Annual and Interim Filings (DCAP)Multilateral Instrument 52-109

Certification of Internal Controls over Financial

Reporting (ICOFR)Multilateral Instrument 52-111

Audit Continuous Disclosure Committees Obligations

Multilateral Instrument 52-110 National Instrument 51-102

Canadian Public Independence RulesAccountability Board CICA/Provincial Institutes'

Rules of Profession Conduct

CSA Auditor OversightNational Instrument 52-108

Others

Investor Confidence Rules

Example: Regulatory Requirements


InfrastructureGeneral Computer Controls

General Application Controls

Fin

anci

al R

epo

rtin

gU

nd

erw

riti

ng

Dis

bu

rsem

ents

Tre

asu

ry

Oth

er

Level 2

General Computer Controls• Change & Configuration

Management

• Network Administration

• Security Administration

• Data Center Operations

• Database Administration

• O/S Administration

Level 3

I.S. ProjectsBusiness Projects

Automated Application Controls

• Data Validation, Edit Checks & Output Reconciliations

• Interface Controls

• End User Security

General Application Controls• System Development

• Change Control

• Data Recovery

• Database Management

• Programmer Security

Impact to Enterprise IS Projects

Level 1


Comments on Regulatory Compliance

• CIO Sign-off Before CEO• Legal Implications• Audits are “negative assurances”• Audit practices will permeate all IT

audits• Certified Professionals Are Better Able

to Provide the Process Assurances to Allow CIO Sign-off


How Do We Get There?

• Trusted IT Professionals

• Professionals Who Manage Risk

• Use of Proven Best Practices


• Technical Competence is “Table Stakes”

• Trust – Trusted Competence

• Mastery of the Core BOK • Professional Experience• Best Practices

– Trusted Intentions• Code of Ethics

Trusted IT Professionals


• Professionalism

• Innovation and Creativity

• Accountability

• Knowledge Development

About CIPS: Values


CIPS Addresses Business Issues By:• Certifying/Recertifying individual practitioners• Accrediting academic institutions• Adopting standards of practice• Advocating on behalf of the profession• Offering professional development• Working with other IT and engineering bodies• Disciplining where appropriate


Certification: General Info• Certification is not vendor specific• About 1500 I.S.P. holders across

Canada• Provincially-administered National

Standard– Recognized by statute in 6 provinces as a

self-regulating profession– Canadian Information Processing Society of

Ontario Act, 1998,c.Pr5

• Mutual recognition with other countries


International Recognition

• International Recognition– Mutual Recognition Agreements

• Harmonization of Professional Certifications

• GATS Negotiations


Computer Specialists Under General Agreement on Trade in Services (GATS)

• Canadian “Offer” for "Information and Communications Technology Professionals" Category Includes:– “A License Or Designation Equivalent To The

Information Systems Professional - ISP Designation Obtained From The Canadian Information Processing Society Or From A Mutually Recognized Foreign Accreditation Body”

• Currently An Offer – Not A Commitment


• Protection of the public

• Professional credibility

• Personal integrity and competence

• Enhanced customer confidence

• Enhanced professional profile

• Increased value to employer

Certification: Goals


CIPS Will Be Important in Making This Happen

• Code of Ethics

• Body of Knowledge

• Best IT Practices

• Risk Management Standard


Code of Ethics

• Guiding Document for Professional Practice

• Widely Reviewed and Endorsed• Standard for Discipline


The Ethical ImperativesI will place my client's interest above my own and nothing will be above the public interest. – I will fairly describe my level of competence and

deliver to the claimed level of competence. – I will protect all private or confidential

information that I obtain from clients or colleagues.

– I will be impartial in giving advice and fully disclose any potential conflicts of interest.

– I will work to advance my profession and actively support my professional colleagues.


Privacy Commissioner’s Comments

“The Office of the Privacy Commissioner of Canada supports the work of IT professionals in setting a Code of Ethics for their profession. The leadership demonstrated by CIPS is to be applauded and emulated. By incorporating privacy protection as a core element of its ethical framework, CIPS not only demonstrates that IT professionals are an integral part of the value chain of their organizations by ensuring that systems – and the information assets they contain are protected against abuse and misuse; ...

By up-holding the highest standards and putting in place mechanisms for greater professional accountability, IT professionals, through their own ethical conduct and unique expertise, will become important architects of privacy protection in systems and applications.”

Jennifer Stoddart -Privacy Commissioner



• Code of Ethics





Body of Knowledge

• Adopted the BCS Syllabus

• Moving Towards to Body of Knowledge Similar to Computer Science Graduate– Not Necessarily Obtained in Degree

Program– Alternate Paths to Demonstrate

Mastery of BOK



• Code of Ethics





Best IT Practices – The Future

• Adopting Best Practices that Will Provide More Rigour to IT Activities– Mandatory vs. Recommended vs.

Best Practices– International Standards

• Linked to I.S.P. Professional Practice Requirements



• Code of Ethics





Risk Management Standard

• Emerging Standard of Practice :– All professional assignments must

begin with a risk assessment, and risk management must be practiced throughout professional assignments.

– Approved in Principle By National Board in April 2006

– SOP Is Now Under Development


Summary• Business Risks Are Ever-Present• CIPS Helps Organizations Manage Risk

– CIPS Offers The Only Professional IT Certification In Canada That Is Recognized By Statute

– Professional Certification That Embodies Technical Competence AND Professionalism

– Discipline– Accreditation Of Educational Institutions– Standards Of Practice Are Emerging– Leads To Highly Professional Workforce And Lower

Business Risk• Trusted Competence• Trusted Intentions


“When you’re through changing…

you’re through.”

Will Rogers

“The professional association providing leadership in

information systems and technologies”

Documents

What is the Value of IT Certification?