Stewardship is extending to IT as Boards question the depth of their enterprise’s reliance on IT. Some thoughts on how IT risk, control, audit and assurance is evolving toward the broader concept of IT governance. Why IT governance should be on the Board of Directors’ agenda wherever IT is strategic to the business. How it fits in the broader concepts of enterprise governance and how management and boards can address it.

1. IT Governances Stewardship is extending to IT as Boards question the depth of their enterprise’s reliance on IT

24. IT Value Delivery Stakeholder Value Drivers Performance Measurement Risk Management IT Strategic Alignment

28. IT Governance Framework Set measurable goals Compare results Measure performance Act if not aligned Deliver against the goals 

30. IT Alignment Business Strategy Alignment Activities IT Operations IT Strategy Business Operations

31. IT Value Delivery

34. IT Balanced Scorecard Information Financial Customer Process Goals Measures Goals Measures Learning Goals Measures Goals Measures

42. Cost of IT Security Have a clarity of purpose Cost of security and control vs. IT Budget 5 - 10% 20 - 25% 45 - 50% 55% Cost of noncompliance Benchmarking Leadership “ Cowboy” operation Baseline operation Good Practice Industry reference site = driver for change

44. IT Security is a C ontinuous E ffort Keep on doing it  Perform Intrusion Testing Ž Perform Active Monitoring Œ Issue Security Policy  Security Management  Design Security Defenses