1. Joseph Ponnoly
MBA, MSc, CGEIT, CISM, CISA, CISSP

3. IT projects fail
Responsibility IT talents and
for IT skills
Obsolete Business Returns on IT
Technology investments
& IT
Quality service Information
delivery risks
IT
performance

5. Business IT

6. Governance

7.  Enterprise System Architecture:
 Strategy, Business, Information, Systems and Technology.
 System Architect promotes:
 Increased Organizational Agility
 Alignment of Business Processes and IT Systems to Business
Objectives
 Planning, Modeling, and Execution of Business Processes (BPM)
 Rapid, Effective and Positive Response to Business Change
 Architectural Frameworks
 The Zachman Framework
 TOGAF

9. Risk Defined (LOSS –
possibility/probability or exposure)
STRATEGIC OPERATIONAL INFORMATION
HAZARD RISK
RISK RISK RISK
PEOPLE
PROCESS
TECHNOLOGY
Enterprise Risk Management (ERM)

10. Risk/Management Internal Control
Framework
COSO
AS/NZ 4360:2004
Dealing with Risk
AVOID
TRANSFER
Information Risk
Management
Framework/ Standard: MITIGATE
• ISO 27002- Information Risk
Management Standard ACCEPT
• NIST SP 800-30 / 800-53
• CRAMM
• OCTAVE
•FAIR

11. IT
Resources
People
Application
Systems
Technology
Facilities
Data

12.  Portfolio & Project
Management
 PRINCE 2 and PMBOK
 Balanced Score Card

17. Key Areas
effective organizational
•IT Strategy
leadership business processes
structures •Finance, Budgeting & Investments
•Enterprise Architecture
•Business Analysis
•Solutions Development
•Service Delivery
•Supply Management
IT Strategy-
IT investments
Business IT
alignment
•Risk Management
value governance
Risk Management •Compliance
Resources
•Resources Management
management
•Talent Management
Performance
Management
•Data Governance
•Performance Metrics/ Balanced
Score Card
•Portfolio & Project Management
•Auditing & Assurance

20. effective organizational
leadership business processes
structures
Business – IT
strategic alignment
Value delivery
risk management,
Resource
management
Performance
management
technology
skills
Risk
legal skills management
skills
CGEIT
(Certified in
business skills Governance financial skills
of Enterprise
IT)

21. •Creation of an IT strategy that aligns with business strategies
IT Strategy
•Optimization of IT investments using the COBIT/VAL-IT framework
IT Investment management using financial engineering concepts and analysis.
•Risk Management using ISO 27002 and the COSO framework
Risk Management
• Knowledge Management , Information Management, DSS/ Business
Resource Management Intelligence, Technology Architecture & Solutions Management, Training
• portfolio and project management , ITSM, ITIL framework for service
Performance Management delivery, CMMI for software acquisition and implementation maturity
Performance Measurement- •Implementation of the Balanced Score Card for effective monitoring of
IT performance, Performance Metrics
Balanced Score Card
•Compliance initiatives for Governance, Risk & Control.
Compliance (GRC)

23.  Auditor’s role in IT Governance
 Assessment & Assurance to Board of Directors & Executive
Management
 Auditing IT Governance
 IT Strategies
 Value Governance & IT Investments & Finance Management
 Risk Management
 Resources Management
 Performance Metrics