ME04.1 Establishment of an IT Governance Framework Define, establish and align the IT governance framework with the overall enterprise governance and control environment. Base the framework on a suitable IT process and control model and provide for unambiguous accountability and practices to avoid a breakdown in internal control and
...
ME04.2 Strategic Alignment Enable board and executive understanding of strategic IT issues, such as the role of IT, technology insights and capabilities. Ensure that there is a shared understanding between the business and IT regarding the potential contribution of IT to the business strategy. Work
...
ME04.3 Value Delivery Manage IT-enabled investment programmes and other IT assets and services to ensure that they deliver the greatest possible value in supporting the enterprise´s strategy and objectives. Ensure that the expected business outcomes of IT-enabled investments and the full scope of effort required
...
ME04.4 Resource Management Oversee the investment, use and allocation of IT resources through regular assessments of IT initiatives and operations to ensure appropriate resourcing and alignment with current and future strategic objectives and business imperatives. ME04.5 Risk Management Work with the board to define the enterprise´s appetite for IT risk, and obtain reasonable assurance that IT risk management practices are appropriate to ensure that the actual IT risk does not exceed the board´s risk appetite. Embed risk management responsibilities into
...
ME04.6 Performance Measurement Confirm that agreed-upon IT objectives have been met or exceeded, or that progress toward IT goals meets expectations. Where agreed-upon objectives have been missed or progress is not as expected, review management´s remedial action. Report to the board relevant portfolios, programme and
...
ME04.7 Independent Assurance Obtain independent assurance (internal or external) about the conformance of IT with relevant laws and regulations; the organisation´s policies, standards and procedures; generally accepted practices; and the effective and efficient performance of IT. |