definition and validation of a business it alignment method for enterprise governance improvement in...

8/12/2019 Definition and Validation of a Business IT Alignment Method for Enterprise Governance Improvement in the Context of Processes Based Organizations _ Wellington

1/14

June 16, 2014 1

Definition and Validation of a Business ITAlignment Method for Enterprise

Governance Improvement in the Context ofProcesses Based Organizations

Christophe Feltus, Centre de Recherche Publ ic Henri Tudor LUXEMBOURG

Mic hal Petit, Compu ter Sc ienc e Departm ent FUNDPBELG IUM

Georges Ataya, Solvay Bus iness Schoo l ULB BELGIUM

2 8 Corporate Governance of ITInternational Conference

Well ington New Zealand

December 1 - 2
http://images.google.lu/imgres?imgurl=http://www.einstein.br/images/6/area/institucional/institucional/ISO1.gif&imgrefurl=http://www.einstein.br/Ingles/ExcellenceInQuality/ISO&usg=__fQu6WTfCo2XeIQ3p_RXqHfINLy4=&h=85&w=220&sz=3&hl=fr&start=4&tbnid=ImwRd4dDp9gSgM:&tbnh=41&tbnw=107&prev=/images%3Fq%3Dinternational%2Borganization%2Bfor%2Bstandardization%26gbv%3D2%26hl%3Dfr


2/14

June 16, 2014 2

Review of existing

AC Models

RE Models

EAM Models


3/14

June 16, 2014 3

The model

Accountabi l i ty: which describes the state of being answerable about the

achievement of an activity

Commitment : is the moral engagement of an agent to fulfill an activity and the

assurance that he will do it in respect of an ethical code.

Capabil i ty : which describes the require qualities skills or resources to perform anactivity.


4/14

June 16, 2014 4

The model

Advantages

- Responsibility are clearly established and understood- Accountability is linked to an agent rather to a group of agent (like role)

- It increase the ethic of the business

- It guarantees the right capability of the right agent. Not more, not less.


5/14

June 16, 2014 5

The model

Policy elicitation : The model advantage is a strong framework for policy elicitation.

The model may address all level of the organisation

The policies may be technical as well as managerial

Enhancement of models : Lot of models do not deeply address the responsibility.We join those models with the responsibility model

The model are closer to governance requirements

Standard enforcement in practices :

The model provide material to enhance the practice


6/14

June 16, 2014 6

ISO/IEC 15504

- ISO/IEC 15504 provides a processes structure and a maturity model

- Responsibility is not centric in the standard. It is addressed in Level 2 of the MM

- Basically, the standard may not be used to define policies

We make links between the standard and our model

- Based on that link, it is possible to define policies

aligned to business requirements


7/14June 16, 2014 7

ISO/IEC 15504


8/14June 16, 2014 8

CIMOSA EAM

CIMOSA is a modeling framework that provides

semantic unification of the concepts from a

system architecture.

It contains three axes (CIMOSA Cube) :

-GENERATION (with 4 views : Function,

Information, Resources and Organization)

-INSTANTATION

-DERIVATION

Agent = functional entity

represented in resource view

Responsibility

represented in organization view

Capability

represented in resource view

No commitment, no link between

accountability and responsibility


9/14June 16, 2014 9

CIMOSA EAM

ResourceInput: Name of resourceResponsibility:

Accountable : l ist of accountabi l i t iesCapability : l ist of capabi l i t iesCommitment :l i s t o f commitments

Improvement :

- Responsibility explicitly introduced in organization view

- Responsibility is linked to an activity and to an agent

- Capability no more linked to the activity but is linked to the responsibility

- Commitment is introduced

- Accountability is formally a component of the responsibility


10/14June 16, 2014 10

ISO/IEC 38500:2008

The principle :

ISO/IEC 38500:2008 requirement (from Principle 2 : Strategy) :

Agent : Director

Activity : Direct the preparation and use of plans and policiesAccountability : Plans and policies

The standard provides principles and not guideline

Is it improvable regarding the definition of responsibility ?


11/14June 16, 2014 11

ISO/IEC 38500:2008

ISO/IEC 38500:2008

Director should direct the preparation and use of plans and policies that ensure theorganization does benefit from the developments of IT


12/14June 16, 2014 12

ISO/IEC 38500:2008

ISO/IEC 38500:2008

From principle to guide lines :

Information from :

CobiT : PO1 Plan and Organise : Define a Strategic IT Plan

ITIL : IT Planner roles objectives


13/14June 16, 2014 13

Conclusions

ISO/IEC 38500:2008

6 principles :

Principle 1 : Responsibility clearly defined and assigned

Responsibility may be model using Capability, Accountability and Commitment

1stillustration :

Creation of policies (business to IT) from business goals / processes

and mapping with the standard ISO/IEC 15504

2ndillustration :

Enhancement of existing model; enhancement of CIMOSA to improve

responsibility definition and assignation through enterprise

architecture

3rd

illustration :Enhancement of the responsibility definition in governance principle

and contribution to the translation of principles in guide-lines.


14/14June 16, 2014 14

Thank you fo r you r attent ion,

Quest ion ?

Dr Christophe Feltus

Public Research Centre Henri Tudor,

Luxembourg-Kirchberg, Luxembourg

[email protected]

definition and validation of a business it alignment method for enterprise governance improvement in...

Documents