IT Governance Priciple and Framework

Asisten: Bu Rani 100210

IT governance?
IT: enabling tools dr importance strategic utk mencpai tujuan bisnis/perusahaan
Yg ditawarkan oleh IT:
-nilai tambah produk/layanan
-competitive positioning
-efisiensi administratif
-efektifitas managerial

Peningkatan Peran IT dlm Organisasi:
1. pendukung back office
2. pendukung proses
3. sumebr keuntungan dan pembeda

Bidang yg paling banyak mengadopsi IT secara urut:
1. Penerbangan
2. retail
3. keuangan
4. otomatif
5. kesehatan

Buku: Petter weill and ros
Tahap pengintegrasian Business Strategy dan IT Strategi:
1. BS dan IT S terpisah
2. BS dan IT S sdh selaras
3. BS dan IT S terintegrasi

Kenapa IT Governance?
1. adanya peningkatan resiko IT seiring dgn peningkatan peran IT
2. perlunya pengelolaan yg bertanggungjwb thd resource IT
3. pentingnyan utk memastikan : harapan akan IT terpenuhi, resiko IT terkurangi, nilai strategis IT terealisasi

Definisi IT Governance:
Tata Kelola: msg2 sdh ada pembagian tugas siapa yg memutuskan, siapa yg melaksanakan, siapa yg mengontrol, siapa yg menggunakan ...
Defisnisi dari bbrp sumber:
- The ministry of International trade and Industry, US 1999:
"The Organisational capacity to control the formulation and implementation of IT strategy and guide to proper direction for the purpose of achieving competitive advantages for the corporation"

- IT Governance Institute, 2001:
"IT Governance is the responsibility of the Board of Directors and executive managemet, it is an integral part of enterprise governance and consist of the
leadership and organisational structures and processes that ensure that the organisation’s IT sustains and extends the organisation’s strategy and objectives"

-Van Grembergen, 2002:
"IT Governance is the organisational capacity exercised by the Board, executive management and IT management to control the formulationn and implementation of IT strategy and in this way ensure the fusion of business and IT"

-Peter Weill & Jeanne W Ross – MIT, 2004:
"Specifying the decision rights and accountability framework to encourage desirable behaviour in using IT"

Intinya: struktur kepemimpinan, organisasi, proses yg memastikan IT mampu memaksimalkan, memperluas strategi utk pencapaian tujuan organisasi

Prinsip IT Governance:
- pengembangan sebuah bisnis yg terfokus pada IT Strategic Plan dlm mendukung pencapaian tujuan orgaisasi.
- alignment antara It resource dan skills
- memastikan bahwa IT System mendukung pencapaian tujuan bisnis
- memaksimalkan fungsi dan manfaat investasi IT
- membantu mencapai potensi strategis IT
- berfokus pd dua tanggungjwb: IT mampu memberikan nilai dan menjadi enabler bisnis; juga IT-related risk harus dihilangkan/dikurangi

IT Governance mengatur semua pihak yg terlibat dgn IT:
-Boards of Director
-Employee's worker council
-Internal IT Service providers(IT Organizations,Shared Services Center)
-External IT service providers
-Regulatory authorities
-Business Unit, subsidiaries
-Afilliated companies
-Central Functions(corporate strategy, accounting, controlling, HR....)

7 Pertanyaaan:
Apa manfaat IT bg perusahaan:
1. IT Governance: Seberapa besar kontribusi bg orgnisasi?
2. IT Architecture: Bgm arsitektur IT dikembangkan dan diimplementasikan dlm organisasi
3. Perencanaan dan Pengontrolan TI: Bgmn sehrsnya layanan IT dikelola dan dimonitor
4. Alignment antara BS dan IT: Bgm alignment antara strategi bisnis dan strategi IT

Bgmn IT dikelola:
1. Leadership dan Organisasi IT: Bgmn struktur organisasi IT utk kebutuhan lokal dan regional
2. IT Development dan Delivery: Bgmn sehrsnya iT development dikelola? Bgmn bentuk IT development? Apa standar yg sesuai utk delivery layanan?
3. Skill and Sourcing: Skill apa yg hrs dikembangkan dgn dipelihara internal dan aktifitas apa yg hrs di outsource?

Cobit : ada 34 domain, yg bisa diperkecil sesuai kebutuhan
Zachman : ada matrik 6 x 6

Definisi IT Governance menekankan hubungan erat antara organisasi scr keseluruhan:
-What: IT Governance adl bagian tak terpisahkan dr Corporate Governance dan mengkombinasikan Leadership, Struktur Organisasi, Proses dan memastikan bahwa IT
mendukung strategi dan objectives dari organisasi

-How: IT Governance menyediakan panduan, kriteria, dan standart utk pembuatan keputusan,pengawasan, pengukuran dan peningkatan kinerja TI

-Who: IT Governance adlh tanggungjwb executive board dan executive management(termsk IT) dan mendukung interelasi semua pihak dlm organisasi yg terlibat dg IT

-what Not: meski dipandu dgn It Governance, operasi sehari-hari atau operative project management bukan merupakan bagian utama IT Governance.

Objectives/Domain IT Governance (sdh adopsi dari Cobit):
1. strategic alignment
2. value delivery
3. management resource
4. risk management
5. performance measurement

Framework IT GOvernance:
1. COSO, 3 komponenn utama: Entity level control, Application Control, IT General Controls
2. COBIT (Control Objectives for Information and Related technology): informasi diplan dan organize, acquire dan implement, deliver and support, monitor dan evaluate , information : brp tool yg melingkar
- Di Proses: CSF, KPI(key Performance Indicators), Goal/objectives,Control Objectives, Di Output: KGI(Key Goal Indicators), menghsilkan : maturity model
3. IT Infrastrukture Library: Menhubungkan Business dgn Technology via Planning to Implemtation Service management.
4. BS7799: Integrity, Confidentality, Availablity

Strategi Implementasi IT Governance meliputi:
1. Structure and Role: IT-IL, BS7799, Cobit
2. Metric: COBIT
3. Process: IT-IL, COSO, COBIT, BS7799
4. Technology: IT-IL
5. Control: IT-IL, COBIT, BS7799
6. People: COBIT

-Cobit: akn membantu dgn menghasilkan matriks
-COSO: sekuriti
-ITIL: layanannya, berbentuk siklus
-Pemerintah: Cobit, ITIL

Siklus implementasi:
1. What is the vision?
2. Where are we now?
3. Where do we want to be?
4. How do we get where do we want to be?
5. How do we check our milestones have been reached?

Dari kelima pertanyaan di atas: How do we keep the momentum going? (pake IT-IL)

Pertanyaan apa bedanya COBIT dgn IT BSC?
- Cobit lebih cocok utk Tata Kelola IT
- IT BSC lebih cocok utk Strategi IT