ISO/IEC 29382 - the new standard for ICT Governance

itSMF-NL Spring 2008 Conference
"Best Practices in IT Management:
BEYOND ITIL, BEYOND CONTROL"
April 22, 2008 Hotel & Congrescentrum De Reehorst , Ede , Nederland
ISO/IEC 29382 - the new standard
for ICT Governance
Christophe Feltus
Member of the ISO Study Group on ICT Governance
Public Research Centre Henri Tudor,
29, Rue John F. Kennedy
L-1855 Luxembourg
christophe.feltus@tudor.lu
July 21, 2010
1

---

Outline
 ICT Governance definitions
 SG on ICT Governance
 itSMF involvement
 Interim Report
 Beyond ISO 29382

Scope

Application

Objectives

6 principles

Model for Corporate Governance of ICT
 Conclusions
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
2

---

Outline
 ICT Governance definitions
 SG on ICT Governance
 itSMF involvement
 Interim Report
 Beyond ISO 29382

Scope

Application

Objectives

6 principles

Model for Corporate Governance of ICT
 Conclusions
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
3

---

Some definitions
 AS 8015 – Australian National Standards
Corporate Governance of ICT is the system by which the current and
future use of ICT is directed and controlled. It involves evaluating and
directing the plans for the use of ICT to support the organization and
monitoring this use to achieve plans. It includes the strategy and policies
for using ICT
within an organization.
(Corporate Governance of
Information and Communication Technology; January 2005).
 OECD Corporate Governance
Corporate governance involves a set of relationships between a
company‘s management, its board, its shareholders and other
stakeholders. Corporate governance also provides the structure through
which the objectives of the company are set, and the means of attaining
those objectives and monitoring performance are determined. Good
corporate governance should provide proper incentives for the board and
management to pursue objectives that are in the interests of the company
and its shareholders and should facilitate effective monitoring. (OECD
Code on Corporate Governance)
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
4

---

Some definitions
 ITGI (IT Governance Institute)
IT Governance is the responsibility of the board of directors and executive
management. It is an integral part of enterprise governance and consists
of the leadership and organisational structures and processes that ensure
that the organisation‘s IT sustains and extends the organisation‘s
strategies and objectives. (Board Briefing, 2nd edition; 2003).
 World Bank Definition of Corporate Governance
Corporate governance refers to the structures and processes for the
direction and control of companies. Corporate governance concerns the
relationships among the management, the Board of Directors, the
controlling
shareholders
and
other
stakeholders.
Good
corporate
governance
contributes
to
sustainable
economic
development
by
enhancing the performance of companies and increasing their access to
outside capital.
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
5

---

Some definitions
 MIT Sloan Center for Information Systems Research :
IT Governance is specifying the decision rights and accountability
framework to encourage desirable behaviour in the use of IT. (MIT CISR
Working Paper No. 326; April 2002).
 University of Tasmania
The survey of the literature by academics from the University of Tasmania
(Webb, Phyl, Pollard, Carol, and Ridley, Gail (2006), Attempting to Define
IT Governance: Wisdom or Folly?, Proceedings of the 39th Hawaii
International Conference on Systems Sciences) brings out the ‗elements‘
that are common to a range of suggested definitions. The elements are:
strategic
alignment,
delivery
of
business
values,
performance
management, risk management, policies and procedures, and control and
accountability.
Their resultant definition is
: IT Governance is the
strategic alignment of IT with the business such that maximum
business
value
is
achieved
through
the
development
and
maintenance of effective IT control and accountability, performance
management and risk management.
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
6

---

Outline
 ICT Governance definitions
 SG on ICT Governance
 itSMF involvment
 Interim Report
 Beyond ISO 29382

Scope

Application

Objectives

6 principles

Model for Corporate Governance of ICT
 Conclusions
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
7

---

Study Group in ISO
 JTC1 : Information Technology Standards
 JTC1 / SC7 : Software and System Engineering
 JTC1 / SC7 / WG25 : IT Operations (service management)
 Basically : Study Group in WG25
Study Group Chair : Alison Holt (New Zeland)
Co-Chair : Ed Lewis (Australia)
Members :
Yoshiyuki Hirano, Japan
Alwyn Smit, South Africa
K.T. Hwang, Korea
Melanie Cheong, South Africa
Bill Powell, United States
Jyrki Lahnalahti, Finland
Dennis Ravenelle, itSMFI
Craig Pattison, itSMFI/New Zealand
Hella Shrader, United Kingdom
Darcie Destito, United States
Mark Toomey, Australia
Gargi Keeni, India
Mikhail Pototsky, Russian Federation/itSMFI
Sushil Chatterji, ISACA/ITGI
Max Shanahan, ISACA/ITGI
Brian Cusack, New Zealand
Luis Rosa, Spain
Christophe Feltus, Luxembourg
Jenny Dugmore, UK.
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
8

---

Study Group in ISO
 In Seoul (2006) :
Reduce – if not remove – the confusion in the professional and the
academic literature about the topic
Resolutions :
- New SG
- 1st report
- Fast Track
 In Moscow (May 2007) :
 Preparation of 1st report
 Definition of ICT Governance
 What is ICT Governance ?
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
9

---

Study Group in ISO
 Montreal (November 2007)
Fast Track on Australian Standard on ICT Governance
 Accepted in July
 Resolution of comments on Fast Track : 149
 Canada : 2
 Spain : 1
 France : 5
 Italy : 10
 Japan : 10
 Korea : 1
 Luxembourg : 46
 New Zealand : 6
 UK : 4
 Sweden : 9
 USA : 15
 South Africa : 40
 1st report
 NWI
itSMF-NL Spring 2008 Conference
July 21, 2010
"Best Practices in IT Management: BEYOND ITIL, BEYOND CONTROL"
10

---