3. 1. 3 it governance mandate
The organization's it governance activities are defined as integration, guidance, oversight and improvement. Implementation plans, strategies that integrate current and future it strategies and organizational planning, management and performance; guide it management implementation, performance appraisal, risk control and operational compliance; monitor it-business coherence, consistency and compliance with it applications; and improve it strategic planning, organizational strategy, information system life cycle control and data governance. The main task of organizing it governance activities is focused on five areas。
(1) global integration. Integrated planning of the target range of it governance, technological environment, trends and human rights. Organizations need to adapt to the current information environment and future trends to ensure that stakeholders understand and accept the strategy, objectives and direction of it. Organizations need to make it governance an integral part of their governance, establish it governance structures and make clear that the head of the organization is accountable for it governance. The organization also needs to focus on the planning, implementation, inspection and improvement of the entire process of it development, with emphasis on the development of an it blueprint for sustainable development; the implementation of scientific decision-making, integrated management strategies, horizontal business integration and vertical business control; ensuring consistency and applicability of it and operations through internal and external oversight; and the establishment of continuous improvement and innovative mechanisms adapted to changes in the internal and external information environment。
(2) value orientation. Value orientation includes accountability mechanisms based on the realization of effective gains, ensuring that expected gains are clearly understood and realized. Organizations need to establish a value framework for it investments to ensure that the strategic objectives of it are met on the basis of affordable costs and acceptable risk levels. To ensure that it governance is in line with the value orientation of organizational governance, with a clear strategic direction for investment, and with the it services, assets and other resources generated by investment. The organization needs to establish value delivery rules to ensure that stakeholders have clear rights and obligations, including: recognizing the value of information technology, information systems and data in the organization; identifying investment catalogues and assessing and managing them accordingly; setting and monitoring key indicators and responding to changes and deviations in a timely manner; weighing implementation costs against expected benefits; and adjusting them in a timely manner to changes in the external and internal environment of the organization。
(3) institutional guarantees. Institutional safeguards mean that organizations should exercise effective control over their it development, ensure the coordinated development of it needs and achievements, and effectively identify, manage, prevent and manage it security and risks. The organization needs to establish an organization-specific approach to institutional safeguards that meets the principles of complementarity, synergy, oversight improvement and controllability of security risks and avoid distorting the direction of decision-making objectives. Organizations need to be clear about management responsibilities, clarity about power relations, accountability and measures. The organization can develop and implement its it governance system in accordance with the requirements of regulatory documents issued by relevant laws and regulations, industry management and higher regulatory bodies, with a focus on: guiding the establishment of regulatory processes and trace management, and setting quality initiatives open to stakeholders; assessing the appropriateness, adequacy and effectiveness of the it management system; auditing the integrity, effectiveness and compliance of it; and overseeing the implementation of improved content through audit and management reviews。
(4) innovative development. Innovative development refers to the use of it innovations to develop business areas, upgrade management, improve quality, performance and reduce costs, ensure flexibility to achieve strategic objectives and adapt to environmental change. The organization needs to support its technological advances, management upgrades and business model changes by building innovative systems around knowledge assets. The organization can maintain the creative skills of the management team on a continuous basis and provide guidance to develop the capacity of members at all levels to ask questions, observe, communicate and experiment. The organization can establish institutional systems that support innovation, people, technology, institutions, finance, risk, culture and market needs, including: creating a technological innovation environment based on in-depth communication between business and it teams, as well as awareness and learning of the internal and external environment; ensuring a coordinated interface between technological development, management innovation and model innovation; assessing organizational innovation capabilities and analysing and evaluating key innovation elements; and effectively countering risk through promotion and innovation and ensuring that innovation is an integral part of the organizational culture。
(5) cultural promotion. Cultural promotion refers to organizations communicating with stakeholders on the objectives, strategies and responsibilities of it governance and creating an organizational culture that is positive and inclusive. Organizations need to guide their staff in adapting to changes brought about by it construction, following ethical and professional norms, attitudes and behaviour. The organization may require management at all levels to include in its responsibilities the building of a culture consistent with the strategic development of information technology. To ensure communication and transparency among stakeholders throughout the life cycle of cultural creation, implementation and improvement, including: the creation of organizational cultural development strategies appropriate to it development; the creation of a positive cultural climate, including knowledge, technology, management, emotional skills; and the assessment and improvement of the management of organizational culture in the light of changes in the organizational environment。
