Recommandé
Contenu connexe
Tendances
Tendances (18)
Similaire à It governance in_higher_education_by_james_yung
Similaire à It governance in_higher_education_by_james_yung (20)
Plus de norsaidatul_akmar
Plus de norsaidatul_akmar (16)
Dernier
Dernier (20)
It governance in_higher_education_by_james_yung
- 1. IT Governance In Higher Education “ What is it, and how does it benefit your Institution?” Pre-Conference Seminar – June 23, 2007
- 2. James Yung, CISA Associate Director, IS Audit Harvard University Risk Management and Audit Services Presenter
- 5. How do most research universities govern the large and rapidly evolving set of information technology initiatives that take place on their campuses? ANSWER: Inefficiently, ineffectively and not as well as they should. ~ Source: Educause – IT Governance in Higher Education 2006 ~
- 12. IT Governance at Harvard
- 18. Risk Management and Audit Services Mission “ To Assist University Management and Governing Boards in Identifying, Managing and Mitigating Risk and Ensuring Risk Management Processes are Integrated Into the University’s Business Practices and Academic and Research Activities”
- 25. CoBIT Approach In Assessing IT Governance At Harvard
- 29. ©2007 IT Governance Institute IT Governance Audit Objectives Effectiveness Information being relevant and pertinent to the business process as well as being delivered in a timely, correct, consistent and usable manner Efficiency Provision of information through the optimal (most productive and economical ) use of resources Confidentiality The protection of sensitive information from unauthorised disclosure Integrity Relates to the accuracy and completeness of information Availability Information being available when required by the business process now and in the future; it also concerns the safeguarding of necessary resources and associated capabilities Compliance Complying with those laws, regulations and contractual arrangements to which the business process is subject, i.e., externally imposed business criteria as well as internal policies Reliability The provision of appropriate information for management to operate the entity and to exercise its fiduciary and governance responsibilities
- 36. Align Business Goals with Key IT Goals
- 41. Questions
- 42. References IT Governance Institute - http://www.itgi.org/ ISACA - http://www.isaca.org / IT Audit - http://www.theiia.org/itaudit/
Notes de l'éditeur
- IT governance process and structure usually involve a confusing hybrid of autonomous departments and one or more centralized units. There are usually a complex committee structure and a mix of decentralized, independent decision makers who are responsible for most local decisions. The governance process are confusing and time consuming and occasionally fail, as evidenced of damaging IT security breaches on many campuses.
- It is about the organization leadership, internal/external stakeholders and how IT investment decisions are made and prioritized.
- IT Governance starts with effective enterprise governance that clarifies strategic direction, priorities of objectives, and exert sufficient control to manage risks and enterprise resources to achieve the outcomes. Management is differs from governance in that its primary focus is on the implementation of decisions made through the governance process.
- Good governance processes will foster timely decisions, responsible actions, and alignment of an organization’s IT strategy with its overall mission and goals.
- 2006 Educause survey suggest IT Governance is a top issue as funding IT is directly related to governance and institutional priority setting.
- Assessment of the IT Governance domain can be integrated or independent based on organization operating environment and risks.
- The risk of inadequate funding of IT and/or mismanagement of IT investments that squandering institutional resources through duplication of efforts and/or lack of planning.
- How critical does your university success depends on IT? How much investment in IT is too much or not enough?
- IT governance framework provides the ability to measure the effectiveness of IT operational, compliance with significant laws and regulations and the delivered value to the business.
- Adoption of CoBIT Framework as an IT Audit standard. Use of CoBIT established creditability of IS Auditor.
- IT Governance Assessment reviews strategic alignment, operational effectiveness, and systems of internal control.
- Seven key IT Governance audit objectives