Following a short recap of the principles of IT Governance and the supporting CobiT framework, participants are grouped in teams of 2 to 3 for a two day hands-on practicum. The assignment consists in developing an implementation plan for an IT Governance initiative to improve the management, control and governance of IT Outsourcing based an extensive case study.
The teams shall identify essential IT processes for the subject and the target organization based on an analysis of the business goals that drive IT and the associated IT goals, and develop for each the key performance drivers and management control objectives.
They shall then evaluate the target’s status in IT Governance processes and practices based on a review of
- the degree of application of governance principles
- the capability maturity of the major processes involved
Results are compared with recent Belgian and Global surveys as well as benchmarked against International maturity statistics.
An IT governance implementation plan shall be developed. based on a 10-step roadmap and driven by the results of the initial analysis. Potential obstacles and risks shall be identified and remedies proposed. The plan will be refined using methods like cause-effect analysis between performance drivers, outcome measures and intial goals. Several automated tools are provided to support the analysis and development tasks.
An assessment report and an action list will be produced by each team, presented and reviewed.
|
Erik Guldentops is Executive Professor at the Management School of the University of Antwerp (UAMS), where he teaches on the subjects of IT risk management, control, security, audit and governance. He maintains a limited number of high level consulting relationships advising on risk and security strategies. He is Advisor to the Boards of the IT Governance Institute and the Information Systems Audit and Control Association (ISACA). He invented the concept of CobiT in 1991 and has since been directing ISACA's CobiT related research and development projects, with the objective to set, enhance and maintain the internationally accepted standard for control and governance over IT. Guldentops is past president of the Benelux Chapter of ISACA and served as ISACA international executive vice president with responsibility for research. He holds graduate and post-graduate degrees in computer science and is a Certified Information Systems Auditor (CISA) as well as a Certified Information Security Manager (CISM). Guldentops has published many articles on the topics of information security, risk management, IT Governance and payment policy. He is a regularly keynote speaker at international conferences.