PO 06 Communicate management aims and direction

focuses on

providing accurate, understandable and approved policies, procedures, guidelines and other documentation to stakeholders, embedded in an IT control framework

is controlled by

PO06.1 IT Policy and Control Environment Define the elements of a control environment for IT, aligned with the enterprise´s management philosophy and operating style. These elements should include expectations/requirements regarding delivery of value from IT investments, appetite for risk, integrity, ethical values, staff competence, accountability and responsibility. The ...

PO06.2 Enterprise IT Risk and Control Framework Develop and maintain a framework that defines the enterprise´s overall approach to IT risk and control and that aligns with the IT policy and control environment and the enterprise risk and control framework.

PO06.3 IT Policies Management Develop and maintain a set of policies to support IT strategy. These policies should include policy intent; roles and responsibilities; exception process; compliance approach; and references to procedures, standards and guidelines. Their relevance should be confirmed and approved regularly.

PO06.4 Policy, Standard and Procedures Rollout Roll out and enforce IT policies to all relevant staff, so they are built into and are an integral part of enterprise operations.

PO06.5 Communication of IT Objectives and Direction Communicate awareness and understanding of business and IT objectives and direction to appropriate stakeholders and users throughout the enterprise.

is part of

Plan and Organise (PO) covers strategy and tactics, and concerns the identification of the way IT can best contribute to the achievement of the business objectives.

The realisation of the strategic vision needs to be planned, communicated and managed for different perspectives.

A proper organisation as well as ...

can be mapped from

Service Reporting the process responsible for producing and delivering reports of achievement and trends against Service Levels;

Service Reporting should agree the format, content and frequency of reports with Customers.

supports

Ensure minimum business impact in the event of an IT service disruption or change

Ensure proper use and performance of the applications and technology solutions

Ensure that IT services and infrastructure can properly resist and recover from failures due to error, deliberate attack or disaster

Ensure that automated business transactions and information exchanges can be trusted

Ensure that critical and confidential information is withheld from those who should not have access to it

Ensure transparency and understanding of IT cost, benefits, strategy, policies and service levels