Page 89 - Courses

Governance of Enterprise IT

IIA Standards Related to Governance

IIA Standard 2110: Governance
The internal audit activity must assess and make appropriate recommendations to improve the
organization’s governance processes for:
 Making strategic and operational decisions.
 Overseeing risk management and control.
 Promoting appropriate ethics and values within the organization.
 Ensuring effective organizational performance management and accountability.
 Communicating risk and control information to appropriate areas of the organization.
 Coordinating the activities of, and communicating information among, the board, external and
internal auditors, other assurance providers, and management.

2110.A2
The internal audit activity must assess whether the information technology governance of the
organization supports the organization’s strategies and objectives.

TOPIC 2: GOVERNANCE FUNDAMENTALS

Why Governance is Important to Any Organization

Proper Alignment Between the Organization and IT
Alignment of IT strategies with organizational objectives:
 Senior management and the board understand the potential and the limitations of IT.
 Senior management and the board understand the value of IT as a strategic partner, and
recognize IT’s role in supporting the bottom line.
 IT senior management understands the objectives and corresponding needs of the organization.
 IT efforts concentrate on processes and projects that support strategic goals.
 Alignment is applied and monitored throughout the organization via an appropriate governance
and accountability structure.
Identification and proper management of risks:
 IT governance is directly related to organizational oversight of IT assets and risk, making it a
shared responsibility of senior management and the board.

Proper Alignment Between the Organization and IT
Implementing IT governance is an imperative part of organizational strategies because it is
fundamentally concerned with goals that ensure that IT delivers value to the business in a controlled
and effective manner.

Performance Measurement and Reporting
Using meaning metrics, effective IT governance provides definition, measurement, and reporting of
IT performance.

Copyright © 2021 by The Institute of Internal Auditors, Inc. All rights reserved.