Principles for a Governance Framework

00:00

Now let's talk about the three principles needed for a governance framework.

00:06

So in this video, we're going to talk about the three principles needed for governance framework.

00:12

We went over the Six Principles for Governance System. Now let's focus on the three key principles for governance framework.

00:21

Kobe recognizes that for a governance framework, it should be based on a conceptual model.

00:27

This model should identify the key components and relationships between components.

00:33

With this conceptual model, you'll have a high level and holistic view of your I T infrastructure and what the components are and how they interact with each other.

00:43

This ensures that you're not leaving out important processes, information or relationships when designing and implementing your governance plan.

00:51

If you don't have a conceptual model, you may not have all the vital information needed.

00:57

Models helps you t to design a useful and relevant governance system that includes avenues that add business value.

01:06

It's important to note that to maximize business value, you should implement automation and maximize consistency where possible.

01:15

Using a conceptual model is important because it determines how the governance of I T must be organized and brings attention to governance and management areas that need special attention.

01:26

It's kind of like having an I T blueprint and supports the overall enterprise

01:36

cope. It states that a governance framework should be open and flexible.

01:40

If you have a flexible way to address issues, it can ultimately lesson risk

01:46

risks can be the loss of time. Resource is financial costs, intangible costs and more.

01:52

Let's quickly go over the risk of loss of time. And resource is

01:56

if you have a rigid way to deal with issues such as hardware failure, wherein you have to obtain approval to replace your laptop from multiple sources and the request can take up to two weeks,

02:07

you will lose those two weeks of work from an employee that suffered in hard hardware failure.

02:13

So this is just an example. But it's important to have a flexible way to deal with issues that will inevitably arise when doing business.

02:21

A sub focus of principle Teoh is that enterprises should focus on maintaining integrity and consistency within the organization.

02:29

Integrity means that all information is accurate and consistent and refers to processes, information and more being standardized toe, lessen the room for error.

02:39

If you have certain data that is all used by one department in different formats and located in different places. Like someone email, someone chat and summon folders, etcetera.

02:50

There is a higher risk and a higher possibility of something going wrong.

02:54

This is important to keep in mind when designing your I T governance system so you can aim for information and processes that are consistent and retain their integrity.

03:06

Take a moment to think about a time in your company

03:09

when implementing a program that was not open and flexible.

03:13

What kind of difficulties did that create for your business and the program itself?

03:22

So the last principle for a governance framework is that it should align to major related standards, frameworks and regulations.

03:30

Ensuring compliance should be a top priority for all organizations.

03:35

Thus, aligning your governance system, toe laws and regulations is absolutely essential.

03:42

While it's not mandated toe a line to major related standards and frameworks, it's important to do so.

03:49

Widely accepted best practices and guidelines will help to ensure that you're doing business in a manner that is proven to be effective, efficient and safe.

03:58

Thus aim for implementing a governance framework that aligns with best practices, standards, frameworks and, most importantly, laws and regulations.

04:08

A C P, a. Firm You and Hide and Barber was using co bit to build processes toe allow its I T department to serve the enterprises needs.

04:16

It's a mid sized accounting firm with 150 employees and six locations.

04:23

Given the size and geographic dispersal, there was a level of I T complexity that the enterprise had to manage.

04:29

The organization found there was a general disconnect between I T and the needs of professionals and that I t spending did not align with the firm's needs and I t Expectations and demands varied among shareholders.

04:43

Thus, the business needs

04:46

directed the governance efforts and management key areas.

04:49

So let's see how the three Kobe principles for a governance framework could assist with this organization.

04:56

A conceptual model would be able to reduce the I T complexity to a high level to see the current informational assets I T systems and interdepartmental relationships and flows.

05:09

Since needs vary from organization to organization, as in this example, stakeholder opinions varied. There was a general disconnect between I T and needs of the business, and I t spending was not aligned with business needs.

05:24

Thus the framework needs to be open and flexible to meet the demands of the C P. A firm.

05:30

Since it was considered a quote unquote small company because it had less than 150 full time employees, it needed to be further adjusted.

05:38

Additionally, since this firm was geographically dispersed, there needed to be customization is added,

05:44

cope it. It's a governance framework that accounts for a level of openness and flexibility for Taylor changes.

05:51

Lastly, a governance framework should align to major frameworks and standards.

05:56

A c p, A. Firm will most likely need to abide by a number of laws and regulation,

06:00

given its industry and the type of information that it works with.

06:04

Thus using co bit, which is a governance framework that aligns toe other major framework standards, laws and regulations and best practices. You have some peace of mind,

06:15

and you also have a level of safety knowing that you're following other widely adopted and accepted practices.