INTE2412: IT Governance & Change Management Proposal for WA

This project presents an IT Governance and Change Management proposal addressing the critical need for enhanced security and quality in ICT systems within Western Australian agencies. The proposal stems from concerns raised by the Auditor General's Office regarding problematic IT governance and information security practices. The core of the proposal involves the implementation of the COBIT 19 framework, a contemporary approach designed to address current security and privacy issues, and improve overall security posture. The proposal highlights the benefits of COBIT 19, including its alignment with the latest technologies and standards, its ability to customize for specific agency needs, and its consideration of specific risks and threat frameworks. The proposal also incorporates a change management model, including planning, execution, control, and closure phases, alongside EDM processes like the development of Information Security & Quality Management Policy and Plan, and testing processes. The document acknowledges challenges such as transition and migration issues, resistance to change, and integration issues. The project concludes with a call to action for WA agencies to adopt the COBIT 19 framework to improve overall security and quality of ICT systems.

IT GOVERNANCE &
CHANGE MANAGEMENT
PROPOSAL
ICT, WA

Introduction
 ICT Systems in Western Australia (WA)
 Security of ICT Systems is a concern
 Implementation of COBIT19 in WA
agencies
 Enhancement of security and quality
 Better governance
 Presentation covers the details and
elements

Background to the Case
 Security issues and
risks in ICT systems in
WA
Easily guessed
passwords
Administrator accounts
and privileged accounts
not managed properly
Sharing of important
accounts
Unauthorized access
risks

COBIT19 Features
 Five management objectives
40 processes
 Performance measurement model
 Maturity management
Capability Measurement
 Easier customization

COBIT19 Features
 Design Factors

COBIT19 – Critical
Analysis
 Benefits
COBIT5 was developed in 2012
7 years since the development
COBIT19 is based on latest technologies
Considers the security and privacy issues in
the present times
Ability to WA to enhance and manage the
overall security

COBIT19 – Critical
Analysis
 Benefits
Based on the following standards

COBIT19 – Critical
Analysis
 Benefits
Inclusion of the design factors
11 design factors
Coverage of relevant areas
Customization for each of the WA agencies
Consideration of specific risks and threat
frameworks

COBIT19 – Critical
Analysis
 Specific Challenges
Transition and migration issues
Resistance to change
Management may lose focus
Too many improvements at the same time
Integration issues

Change Management
Model
Change
Planning
Change
Execution
Change
Control
Change
Closure

Change Management
Model
 Change Planning
Development of change management plan
 Change Execution
Execution of the change processes
 Change Control
Monitoring and control
 Change Closure
Evaluation and closure

EDM Processes
 Development of an Information Security
& Quality Management Policy and Plan
 Test processes
 Security testing
 Redevelopment of audit and control
cycle
 Device testing
 Monitoring of tools