4 - Information Skills and Resources

1. 4 - Information Skills and Resources Information Skills and Resources

2. 4 - Information Skills and Resources – In the Information Age Acquiring, training, retaining, and managing career expectations of professionals in IT and IT related areas and the loss of knowledge and skills due to outsourcing, departures and retirement • Loss of Key Individuals and Their Knowledge Through Downsizing, Lay-offs and Retirements • Lack of an Effective Knowledge Management Program • Difficulty in Retaining Skilled Resources • Lack of a Career • Inability to Offer leading Edge Technology • Difficulty on Obtaining Appropriately Skilled and Qualified Resources • Accounting Staff Who Deal with Information Technology Don’t Have the Necessary IT Knowledge and Skills

3. IT Skills and Resources PerformanceAnalyst Controller Top 2011 Jobs Public Accountant Not IT Specific ERP Business Analyst IT Auditor Lead Application Developer Lawyer Law Clerk Executive Assistant Medical Data Entry Specialist Senior Administrative Assistant Source: Robert Half 2011

4. IT Skills and Resources Position Salary $56,250 - $86,250 Base Performance Analyst $85,500 - $113,750 Average Controller $65,500 - $84,250 Small Firms Public Accountant $80,000 - $105,000 Base ERP Business Analyst $74,500 - $97,000 Base IT Auditor $78,250 - $109,000 Base Lead Application Developer $96,500 - $183,250 Avg 4-9 yrsexp Lawyer $44,555 - $54,750 Average Law Clerk $42,750 - $54,000 Starting Executive Assistant $28,500 - $35,000 Base Medical Data Entry Specialist $38,000 - $48,250 Starting Senior Administrative Assistant Source: Robert Half 2011

5. IT Skills and Resources The Need For More “Rounded” Employees

6. IT Skills and Resources ISACA Journal – Volume 3 2010 This article explores the pros, cons and risks of providing the IT audit and assurance professional with increased business knowledge and skills

7. IT Skills and Resources Business Reaction Implement retention program for key staff and top talent Seek expanded sourcing for new and replacement positions Ensure HR programs and benefits are attractive and appropriate Implement training and advancement programs Broaden the skills of existing IT staff (business, accounting, process management) Regulatory Compliance Risk Management Lack of a comprehensive “Career Management” program Lack of leading edge technology Uncompetitive salary and benefits Out of favour business

8. 5 - IT Governance IT Governance

9. IT Governance Oversight responsibility for the strategic and tactical management for the Planning and Organization, Acquisition and Implementation, Delivery and Support, and Monitoring and Evaluation of the information technology environment. • Limited Awareness of the Information Technology Issues • Poor Alignment of IT with Business and Organization Strategy • Unclear Responsibility and Accountability • Lack of Effective and Timely Reporting 1 to 4 • Lack of Effective IT Governance Program • Lack of Funding for IT Governance Initiatives • Lack of Support from Management or Board for IT Governance • Lack of Effective Monitoring or Follow-up • Lack of interest or Awareness of IT Issues by the Board 5 to 9

10. IT Governance Additional IT Governance Concerns • Lack of: • Recognized Framework of Standard • Policies and Procedures to Operationalize Framework or Standard • Lack of Effective Metrics • Lack of Monitoring and Enforcement • Continuous Imperfect Processes IT Governance Ranked 5th Overall in This Survey However IT Governance (combined with Enterprise Based IT Management) Ranked 2nd Overall in the ISACA 2011 Survey of Top Business/Technology Issues

11. COSO COCO ISO 25999 ISO 38500 ITIL COBIT ISO 27000 King Cadbury IT CG Carver Security Continuity ISO 31000 Risk IT Governance Governance Models IT Governance Models IT Control Frameworks

12. IT Governance IT Classification Type 1: Supports the Business Type 2: Supports Competitive Advantage Type 3: Provides Competitive Advantage Type 4: Is the Business IT is often seen in terms of the business process and not as a “stand alone” item to be discussed at board meetings

13. IT Governance The big conundrum • Nearly one third of respondents where IT was deemed as either a ‘Type 3’ or ‘Type 4’ had no formal board involvement with technology • Only 11% say they are ‘completely and actively involved in IT strategy’ Source: What Boards Needs to Know About IT

14. IT Governance Board and CIO/CTO Interactions • Only 16% of CIOs/CTOs interact with the board at each board meeting • There is a lack of involvement in IT by those responsible for enterprise governance Source: What Boards Needs to Know About IT

15. Governance Strategic Alignment Direction Monitor Compliance Performance Align Deliver Value IT Governance Premier IT Leaders polled by ComputerWorld put these projects at the top of their to-do lists for 2008 From the Computerworld ComputerworldMagazine is a publication of International Data Group Inc.

16. IT Governance “IT governanceis the responsibility of the board of directors and executive management. It is an integral part of enterprise governance and consists of the leadership and organizational structures and processes that ensure that the organization’s IT sustains and extends the organization’s strategies and objectives.” ITGI, Board Briefing on IT Governance www.itgi.org www.isaca.org

17. IT Governance IT Governance Control Cycle ITGI - IT Governance Model Source: ITGI

18. IT Governance Business Reaction Assign responsibility and accountability for IT Governance Review and assess IT governance models and frameworks, and select Implement appropriate IT governance policies, procedures and systems that are aligned with, and support, enterprise governance initiatives Conduct awareness and training IT Governance Risk Management Not embracing IT as a business driver Not recognizing the importance and pervasiveness of IT to the success of business Not implementing and maintaining sustainable risk and compliance initiatives Failure to provide C-suite and boards with appropriate technology focused information