IT Governance & Change Management Proposal.

Case Context In recent years, the Auditor General’s Office in Western Australia has been monitoring problematic governance surrounding IT and Information security in government agencies. Extensive audits published over the last three years have identified the scope this problem. Results suggest that lack luster governance persists. See: WA report2017_12-ISAuditReport WA report2018_14-IS-GCC-App-Pass WA IS-Report-2019 Revitalising ICT governance You are part of the ICT team that services the Education Department in this jurisdiction. After discussions with the Auditor General, the agency’s Director General has agreed that her agency is going to participate in a research and demonstration project. Its purpose is to lift the governance of information security and ICT security initially in the target agency. The procedures developed are then expected to become a model to be adopted by all relevant agencies in the state from 2021. Naturally, the participating agency’s Director General

IT GOVERNANCE &
CHANGE MANAGEMENT
PROPOSAL
ICT, WA

Introduction
 ICT Systems in Western Australia (WA)
 Security of ICT Systems is a concern
 Implementation of COBIT19 in WA
agencies
 Enhancement of security and quality
 Better governance
 Presentation covers the details and
elements

Background to the Case
 Security issues and
risks in ICT systems in
WA
Easily guessed
passwords
Administrator accounts
and privileged accounts
not managed properly
Sharing of important
accounts
Unauthorized access
risks

COBIT19 Features
 Five management objectives
40 processes
 Performance measurement model
 Maturity management
Capability Measurement
 Easier customization

COBIT19 Features
 Design Factors

COBIT19 – Critical
Analysis
 Benefits
COBIT5 was developed in 2012
7 years since the development
COBIT19 is based on latest technologies
Considers the security and privacy issues in
the present times
Ability to WA to enhance and manage the
overall security

COBIT19 – Critical
Analysis
 Benefits
Based on the following standards

COBIT19 – Critical
Analysis
 Benefits
Inclusion of the design factors
11 design factors
Coverage of relevant areas
Customization for each of the WA agencies
Consideration of specific risks and threat
frameworks

COBIT19 – Critical
Analysis
 Specific Challenges
Transition and migration issues
Resistance to change
Management may lose focus
Too many improvements at the same time
Integration issues

Change Management
Model
Change
Planning
Change
Execution
Change
Control
Change
Closure

Change Management
Model
 Change Planning
Development of change management plan
 Change Execution
Execution of the change processes
 Change Control
Monitoring and control
 Change Closure
Evaluation and closure

EDM Processes
 Development of an Information Security
& Quality Management Policy and Plan
 Test processes
 Security testing
 Redevelopment of audit and control
cycle
 Device testing
 Monitoring of tools

Conclusion
 Use of ICT systems is essential for WA
 Presence of security and quality issues
 Handling of issues with implementation
of COBIT19 framework
 Based on latest technologies and
security concerns
 Improvement in overall security

References
 Fanning, F. (2014). Adapting PMBoK Guidance to Public Sector Projects.
Organization, technology and management in construction: An international
journal, 6(3).
 Isaca (2019). COBIT 2019. [online] Isaca.org. Available at:
http://www.isaca.org/cobit/pages/default.aspx [Accessed 19 Sep. 2019].
 Sholihat, N. (2018). The Implementation of COBIT 4.1 and COBIT 5-Based
IT Governance Audits in the Ministry of Finance of Indonesia. The
Indonesian Journal of Accounting Research, 21(2).
 Zeinolabedin, N. (2014). How COBIT can Complement ITIL to Achieve BIT.
Electrical & Computer Engineering: An International Journal, 3(2), pp.1-11.
 Zhang, S. and Fever, H. (2013). An Examination of the Practicability of
COBIT Framework and the Proposal of a COBIT-BSC Model. Journal of
Economics, Business and Management, pp.391-395.
 Zwikael, O. (2015). The Relative Importance of the PMBOK® Guide's Nine
Knowledge Areas during Project Planning. Project Management Journal,
40(4), pp.94-103.