Skip to main content

IT Governance


Some of the hot discussion in my organization is about IT Governance and cloud computing.

What is the  impact of the cloud on IT Governance?

What effect does the emergence of the cloud have on IT strategic investements?

It's important when talking about such topics to take a deep time and understand the principals element of IT Governance.

This post will talk about the definition of IT Governance, its principales and processes.

From a definition point of view, you can resume IT Governance to important questions:

  • What decisions to be made ?
  • Who is accoutable for making decisions?
  • How will the decisions be made?

IT Governance aims  to align IT investment with the hole entreprise strategy and works to ensure few principales:
  • Ensure IT is aligned with business.
  • Ensure IT delivers value to the business.
  • Ensure IT manages risks.
  • Ensure IT manages resources.
  • Ensure IT manages performances.
So your IT decisions should be aligned to the Entreprise business startegy and ensure the principales of IT Governance.

For this, campany should follow processes and recommandations to let IT projects aligned with the theentreprise business strategy, and so we speak about IT Governance processes which could be listed as below:
  • Audit and risk managment.
  • Architecture management.
  • Building and maintaing applications & infrastructure.
  • Client Relationship Management.
  • IT Planing.
  • IT Financial and Resource Allocation.
  • Outsoursing Services.
  • Project Execution & Decision making.
  • Provisionning of IT servicies.
The IT Goverance decisions focus in the IT architecture Decisions, the selection of Business Applications to satisfy the Business needs and to  define the right priority of each decisons.


Comments

Post a Comment

Popular posts from this blog

What You Must Know Before Establishing a Recovery Plan ?

In today's rapidly evolving digital landscape, organizations are increasingly adopting the zero trust model, primarily due to the expanding attack surface that leaves critical systems and data exposed. This shift is also fueled by the heightened sophistication of cyber-attacks, which have become more complex and harder to detect, surpassing traditional security measures. Additionally, the existing operating models within organizations are often inconsistent, typically characterized by distributed and siloed environments.    This fragmentation creates vulnerabilities and makes it challenging to implement uniform security protocols. The zero trust model addresses these challenges by assuming that threats exist both inside and outside the network, necessitating continuous verification of all users and devices. Its adoption represents a proactive stance in the ongoing battle against cyber threats, ensuring a more robust and resilient organizational security posture. The Evolution ...
Post a Comment
Read more

A comprehensive guide to ransomware distribution in VMware environments

In a virtualized on-premises environment based on VMware, ransomware distribution scenarios can be somewhat unique due to the nature of virtualization technology. However, many of the traditional attack vectors still apply. Here are some ransomware distribution scenarios specific to a VMware-based virtualized environment: Phishing Attacks Targeting Administrators: Administrators with access to the VMware environment might receive phishing emails. If they fall for these and their credentials are compromised, attackers can gain access to the virtualized environment. Exploiting Vulnerabilities in VMware Software: If VMware software or the underlying operating system is not kept up-to-date with security patches, vulnerabilities can be exploited by attackers to deliver ransomware into the virtualized environment. Compromised Remote Management Tools: Tools used for remote management of the virtualized environment, such as vSphere, can be a target. If these tools are compromised, attackers ca...
Post a Comment
Read more

Edge Computing Demystified Book

After a while I'm back and pleased  to share in this post my first book around Edge computing Technologies. Edge computing has been a very hot and interesting topic nowadays for communication service provider and Enterprise so far. Augmented Reality / Virtual Reality, Smart cities, Healthcare, industrial IoT and many others use cases require a change in the way we operate and host application in the cloud.  IA, Big Data and analytics are often used today to understand the behavior of the customer and even the health of services. Real-time and high throughput demand are the characteristic of the new business services. Edge computing technology promises to resolve different challenges and brings compute, storage and bandwidth close to the data source. I tried in ‘the Edge Computing Demystified’ book to explain Edge computing technology referring to different use cases from communication service provider and enterprise industry. I h...
Post a Comment
Read more