IT governance

Face-to-face or online

Duration 3 days

A comprehensive IT governance system considers all stakeholders when making benefit, risk and resource decisions for IT operations. Good and aligned IT Governance improves the effectiveness of security and privacy controls within the organization.Management must have a clear understanding of whether
the IT infrastructure (including technology, people, and processes) is capable of supporting expected organizational needs. This can also include emerging topics such as cyber security, the Internet of Things/Industry 4.0 or cloud computing.

Management needs to have a sound understanding and the right awareness of the organization’s IT risk exposure and the effectiveness of its existing governance and control setup. Organizations have an increasing interest in adopting the best practices and standards for IT governance. This can
include for example, the standards provided by the IT Governance Institute (ITGI), Control Objectives for Information and related Technology (COBIT®), ISO 17799 for security or the IT Infrastructure Library (ITIL). These standards will also drive the IT-related risk assessments performed within organizations.
Additionally, new regulations such as the POPIA.

Consequences of failure may lead to more stringent requirements for the organization and increased reporting demands or fines.

Assess and evaluate processes, procedures and controls over IT Governance by considering applicable requirements from management, stakeholders or
national/international regulations.

Provide observations, recommendations, gap-analysis or benchmarking assessments related to the design and effectiveness of enterprise-wide IT governance systems.

Assess the level of contract compliance of any external service provider that support or deliver parts of the overall IT governance framework.

Prioritize and develop a timeframe for implementing missing governance key topics, procedural requirements or key controls.

Expertise in auditing organization-wide functions that have a significant IT infrastructure supporting their operations.

Sound understanding of the organization’s IT governance concept and design, including strategy.

Good knowledge and overview of third-party IT dependencies and expertise in auditing third-party providers such as Service Level Agreement (SLA)
contracts, procurement procedures and any additional control systems applicable to third-party providers.

Broad knowledge of good practice and national/ international regulations in the field of IT governance.

Ability to ascertain the maturity of organization processes in mitigating existing IT risks.

If the design of the IT organization is appropriate to maximize added-value from IT.