Description
Overview
This course is designed to give students a broad Managerial Perspective; a CIO’s or IT Manager’s approach to an IT Organization. The course aims at equipping the student with Global Best Practices, IT Governance, Control and Security Standards, various methodologies and professional real-life know-how and experience. Another dimension of this course is to ensure that technical people are well equipped with social & managerial skills, which will add them value in understanding the world of business. Students will learn how Business-IT alignment is to be achieved, how technical people should deal with business issues & how IT investments in an organization needs to be controlled. At the completion of the course; the students are expected to have a unique understanding of control oriented business & technology partnership
Course Outline
- Introduction to IT Governance
- Set & agree upon the common objectives (SLA) with the class
- Understanding the business, governance & IT in the global economy
- Presenting the course materials and overview of course outline
- Introduction to CobiT Framework & its components
- Assignment of “individual research” for the next session:
Governance Issues about famous CIO’s and their achievements.
- IT Strategic Management – Planning & Organization Domain
- Analysis of a typical IT Organization (domains, roles, responsibilities, organizational units and relationship with stakeholders)
- IT Processes & their meaning
- Planning & Organization related Processes, Management Guidelines.
- Assigning “A Day of Controls” for types of Controls
- Assigning research/project about an IT Organization
- Analysis of a current “IT Organization Chart & mapping the units with Processes”
- IT Solution Development Management – Acquisition & Implementation
- Acquisition & Implementation Domain Processes & Control Objectives
- SDLC & IT Project Management
- Project Definition and PMI Standards (Project Processes)
- How to manage IT Projects – MS Project Overview
- Assignment – Project Management Skills
- Designing an IT Project Plan & WBS,
- Resource Allocation for Tasks & Project Cost Estimation.
- IT Service & Operations Management – Delivery & Support Domain
- Delivery & Support Processes & Control Objectives
- Assignment on “DS-05 Ensure Systems Security” Process
- Preparing a generic “Security Policy” considering the Detailed Control
- Objectives, Segregation of Duties Chart & Management Guidelines
- IT Control Management – Monitoring & Evaluating Domain
- Monitoring & Evaluating Domain Processes & Control Objectives
- Introduction to Audit Guidelines & IT Audit Profession
- IT Balance Scorecard & Process Monitoring
- Assignment of Policy Evaluation
- Formerly assigned generic Security Policies compared to BS 7799 / ISO 17799 / ISO 27001 Standard
- Performing a Cross-GAP Analysis
- Business – IT Alignment
- Business-IT Alignment Requirements, Information Criteria
- Control Risk Assessment, Control Maturity and Process Maturity
- Individual Assignment on Maturity Assessment of a current IT Process
- Use of Management & Audit Guidelines – KPI’s, KGI’s & CSF’s.
- The Legal – Regulatory Environment & the CIO
- Legal Standards & Governance Issues on Compliance
- Major Standards & Global Best Practices
- CobiT, Basel II, Sarbanes-Oxley, SAS 70, HIPAA, COSO, AICPA-WebTrust,
- CMM, CMMI, ITIL, ISO 9001, NIST, etc.
- Assignment on Legal/Regulatory Environment – Standards Comparison
- Sarbanes-Oxley / CobiT Control Objectives Comparison/Mapping
- Common IT Practices & Terminology
- IT Projects & Purchasing (Business Case, RFI, RFP, POC, SLA, etc.)
- Business Process Reengineering (BPR),
- e-commerce framework (X2X)
- e-signature, digital certification & PKI
- Assignment on Project Procurement Management – RFP
- Request For Proposal Preparation for a Major Project
- IT Audit & Risk Management
- Business & IT Risks
- Business & IT Controls
- IT Audit Process
- Risk Assessment Methodology & Process Risk Analysis Fundementals & Phases of IT Audit Projects CAAT’s
- Assignment on Performing an IT Audit (Process / System)
- Audit Report & Executive Summary Presentation
- Evidence Review

