IT governance GOVN
The establishment and oversight of an organisation's approach to the use of information, digital services and associated technology. Includes responsibility for provision of digital services; levels of service and service quality which meet current and future business requirements; policies and practices for conformance with mandatory legislation and regulations; strategic plans for technology to enable the organisation's business strategy; transparent decision making, leading to justification for investment, with appropriate balance between stakeholder benefits, opportunities, costs, and risks.
Levels
| Defined at these levels: | 5 | 6 | 7 |
Click to learn why SFIA skills are not defined at all 7 levels.
IT governance: Levels 1-4
This skill is not typically observed when working at these levels of responsibility.
IT governance: Level 5
Reviews information systems for compliance with legislation and specifies any required changes. Responsible for ensuring compliance with organisational policies and procedures and overall information management strategy.
IT governance: Level 6
Puts in place, or confirms, staffing structures to support the work of the governing authority (board, trustees, etc) and proper relationships between the organisation and external parties. Takes responsibility for review of management processes (and decisions) and confirms that they are compliant with the organisation's strategy for corporate governance of information. Is familiar with relevant standards and the principles embedded within them. Reviews new business proposals and provides specialist advice on compliance issues. Acts as the organisation's contact for relevant regulatory authorities. Establishes policy and standards for compliance with relevant legislation.
IT governance: Level 7
Leads development and communication of the organisation's policies for corporate governance of information. Contributes to strategic plans, which satisfy the current and ongoing needs of the organisation's business strategy, and the current and future capabilities. Promotes clear decision making, leading to valid reasons for technology-related acquisitions. Monitors provision of services, levels of service and service quality. Assures that the organisation's business processes are compliant with relevant legislation, and that the organisation operates according to the principles embedded in relevant standards. Promotes policies, practices and decisions which recognise the current and evolving needs of all the stakeholders.