As a group, discuss the topics listed below on policy and procedure governance. Produce a 4–8 page paper with the results of your discussion. This paper will be added to the Information Technology (IT) Governance Policies and Procedures Manual that has al
Running Head: IT GOVERNANCE POLICIES AND PROCEDURES 1
IT GOVERNANCE POLICIES AND PROCEDURES 2
IT Governance Policies and Procedures
Name
Professor
Date
Contents IT Governance Policies and Procedures Manual Title Page 3 Business and IT Goals 4 Business Goals 4 IT Goals to Support the above Business Goals 5 Conflicts between the two Sets of Goals 5 Information Technology Governance and Information Security Governance 6 Summary 6 Similarities and Differences 6 Regulatory Requirements 6
IT Governance Policies and Procedures Manual Title Page
IT Governance: Policies & Procedures Manual, 2019 Edition is the PMG Company’s apex reference tool used for decision-making to help the company in devising an information systems policy and procedure program uniquely tailored to the needs of the organization.
Other than extensive policies it provides, it is also a valuable resource that often issues information an individual may be in need of
IT Governance: Policies & Procedures Manual provides unilateral access to blue print information that relates to:
· Policy and planning
· System security and accompanying documentation
· Systems analysis, design, and engineering
· And other intricate details pertaining to PMG information systems’ policy
|
LAST UPDATED |
03/05/2019 |
|
FREQUENCY OF UPDATE |
annual basis |
|
COMPANY |
PMG Company |
Business and IT Goals
Business Goals
The company currently has its eyes set on three major business goals. First, breaking into the northern market of the country and the Canadian market. The Canadian Information Technology market is equally a mature market like the one for the United States. The market is several suppliers who are not very much differentiated but enjoy both internal and external economies of scale. The market power rests in the hands of the buyers or consumers who are spoilt with choices to make of what they need and where to get it from. At the same time, the market is open with low barriers to entry other than the government enacting local company’s protection act to prevent direct competition that can be leveled against small firms whose annual turnover rates are below $ 100 million. There is one major risk with a move towards the northern market and Canada, the risk of liquidity.
Secondly, increasing company annual revenue to $330 million and above with a turnover rate of $ 1 billion. In actual sense, all company business goals and strategic objectives all converge at this particular goal. All resources and plans at the PMG Company are all streamlined towards increasing company revenues by at least 5% and above by closing business this year. Finally, completing a takeover to Green Valley Technologies, an IT network solution with a good presence in the southern Canada market. Due to the local company’s protection act that aims to protect young Canadian companies from direct competition that emanates from foreign companies, the best way to scale up operations in Canada within the shortest period possible is through taking over one of the local companies there. A decision has been reached clearing Green Valley Technologies as the company to go for.
IT Goals to Support the above Business Goals
The company’s IT department in conjunction with the overall strategic plan of the company set three major goals aimed at streamlining operations and ensuring efficiency while at the same time aligning them towards supporting the processes put in place to help achieve the business goals. The first IT goal is eliminating all IT related redundancies by the first quarter of the year. Secondly, implement a pure One Shortest Path First (OSPF) and Enhanced Interior Gateway Routing Protocol (EIGRP)-based network to halve the cost of company network maintenance cost by the end of the second fiscal quarter. Finally, the department also aims to conduct total infrastructure migration to the cloud by the end of the second quarter of the year. The IT department goals go hand in hand with the general company business goals of cutting the cost of internal operations to save as much money as possible for the implementation of core business objective which is running aggressive marketing that would result to international market invasion (Murtagh et al.,. 2016)
Conflicts between the two Sets of Goals
Undoubtedly, the two sets of goals are equally important to the organization’s wellbeing. However, concerns have always been raised regarding budgetary allocation issues and supremacy battles. Since achieving expansion success in the southern states, the company’s IT department received a lot of attention from the management that pitted the department to collision paths with other departments in the company. However, all these misunderstandings were ably addressed through the internal reorganization that has seen the strategic IT Department of the company having its own finance department to help it get over its capital intensive ventures.
Information Technology Governance and Information Security Governance
Summary
Information Technology Governance generally concerns making IT investments in a company and managing the resulting investment well to earn a good return on investment by significantly contributing to the business objectives (Maras, 2015). On the other hand, information security governance points to the responsibilities of individuals mandated to ensure the IT information security agenda is well undertaken.
Similarities and Differences
The two are similar in the sense that they all have a contribution to the final business objectives of the company. For their differences, the IT governance involves observing best practices and established frameworks to optimize resulting benefits of IT investments and support attainment of business goals whereas Information Security Governance concerns polices and processes to maximize and leverage information while at the same time ensuring it is secure meets legal and privacy requirements consistent with the company’s business objectives (Pol, 2016).
Regulatory Requirements
Organization-based Employee Regulatory Requirements
· Internal computer use policies
· Professional Dignity and Promotion of Professional Aims
· Competence, Ethics, and Impartiality
· Protection of Public Interest and Legal Compliance
· Responsibility to Employers and Clients
· Third party data protection policies.
References
Maras, M. H. (2015). Computer Forensics. Jones and Bartlett Learning.
Murtagh, M. J., Blell, M. T., Butters, O. W., Cowley, L., Dove, E. S., Goodman, A., ... & Mangino, M. (2018). Better governance, better access: practicing responsible data sharing in the METADAC governance infrastructure. Human genomics, 12(1), 24.
Pol, B. H. T. (2016). Information Governance Policy. Assessment.