Guiding Principles
Adopt a set of principles for good governance of IT that define preferred behaviour within the organization to guide decision-making and the organization's governance mechanisms for IT.
Improvement Planning
Practices-Outcomes-Metrics (POM)
Representative POMs are described for Guiding Principles at each level of maturity.
- 2Basic
- Practice
- Identify a set of appropriate industry standard principles to guide decision-making and governance mechanisms for the use of IT (e.g. ISO 38500's six principles pertaining to responsibility, strategy, acquisitions, performance, conformance, and human behaviour).
- Outcome
- The principles provide insight into what should happen and preferred behaviours to guide IT decision-making and how IT is governed.
- Metric
- # of industry standard governance principles adopted.
- 3Intermediate
- Practice
- Advocate that the preferred behaviours documented in the organization's IT governance principles are used to establish governance structures and mechanisms within the IT organization and to guide decision-making.
- Outcome
- The governance principles are adhered to in most instances, thereby enabling more effective decision-making and governance structures and mechanisms.
- Metric
- # of industry standard governance principles adopted.
- 4Advanced
- Practice
- Mandate that the preferred behaviours documented in the organization's IT governance principles are adhered to across the organization, in a manner that is appropriate to the organization's context.
- Outcome
- The governance principles are always adhered to in a manner that is appropriate to the organization's context, thereby enabling optimized decision-making and governance structures and mechanisms.
- Metric
- # of industry standard governance principles adopted.
- 5Optimized
- Practice
- Continually review and update the IT governance principles and how they are applied to reflect revisions to industry standards and learnings from business ecosystem partners.
- Outcome
- The principles informing the arrangements for IT governance are kept up-to-date and relevant to the changing business context.
- Metric
- Frequency of review and update of the governance principles.