I have been doing some research into "IT Governance," trying to understand which of our available resources are authoritative on the subject. The main sources I've found are EDUCAUSE ECAR (research) articles, Gartner articles on "IT Governance," and last but not least ISACA's Governance section.
ISACA, the Information Systems Audit and Control Association, is also responsible for COBIT, which is an audit-focused IT process framework. They have since branched out into Val IT and Risk IT, frameworks for evaluating the value delivered and risks controlled by IT. If you purchase an ISACA membership you can download their "Implementing and Continually Improving IT Governance" article, which essentially defines IT governance, lists the steps of the continual improvement lifecycle merged with Kotter's eight steps of organizational change, and lists a bunch of pain points and quick wins for various aspects of governance.
ISACA defines governance as
...the responsibility of executives and the board of directors, and consists of the leadership, organizational structures and processes that ensure that the enterprise's IT sustains and extends the organization's strategy and objectives. --ISACA's Board Briefing on IT Governance, 2nd Ed.
and breaks out IT governance into five areas:
- Strategic alignment
- Value delivery
- Risk management
- Resource management
- Performance management
with a particular focus on value and risk (hence, Val IT and Risk IT).
I'm trying to integrate what ISACA is saying with a couple of other concepts:
- Where does IT strategy fit in, and how is IT strategy managed via IT governance ?
- How does "enterprise architecture" fit in with IT governance ?
- What "maturity models" would be appropriate for IT governance targets? COBIT has "ME4 Provide IT Governance" and its controls
If you are interested in IT governance, I highly recommend you join ISACA: you can download their reports PLUS several (COBIT-based) maturity assessments.
Individual site contributors are solely responsible for the content of this web site.