Professional Documents
Culture Documents
ITGov S0 Lect 7Habits-ITGov PDF
ITGov S0 Lect 7Habits-ITGov PDF
Effective IT Governance
Powerful lessons in transforming business and information technology
The title of this work was used with permission from Stephen R. Covey,
author of The 7 Habits of Highly Effective People, © 1989, Simon & Schuster
Y
ou can’t pick up a newspaper or turn on the television today
without reading or hearing about a serious technology mishap.
An IT security breach at discount retailer TJX, owner of T.J. Maxx
and Marshalls in the United States, exposed millions of customer credit
card accounts to potential fraud. Overwhelming online demand for
tickets to the World Series in Boston last year and the Olympics in Beijing
this year triggered system-wide failures. And what about the JetBlue
fiasco? The discount airliner canceled hundreds of flights, causing thou-
sands of passengers to be stranded when its flight-operations system
could not handle changes in its crew schedules and flight conditions.
Is this the wave of the future? Will companies lose can immediately identify his experiences and
customers and market capitalization due to IT preferences—keeping customers and profits com-
failures? It’s hard to predict what might happen, ing in. Moreover, Harrah’s IT team rigorously ana-
but there is the potential for companies of all sizes lyzes the costs and benefits of IT and CRM-related
to experience similar IT disasters. Some compa- projects, including the business value they create.
nies will survive (T.J. Maxx and Marshalls did), Today, senior executives, boards of directors
but many others may fail due to inefficient IT sys- and shareholders are demanding more effective
tems and platforms, bringing sales and operations governance of their IT organizations — striving to
to a halt, and leaving scant time for a successful be a Harrah’s rather than a JetBlue. They know
recovery. The executives and board members serious IT failures create chaos not only with busi-
responsible for future IT failures may become as ness operations but also with customer relation-
infamous as Enron’s Andrew Fastow, Jeff Skilling ships. Restoring customer confidence and brand
and Ken Lay, with millions of dissatisfied custom- loyalty can take years and cost millions of dollars.
ers and shareholders left in the dust. At a time when profits are down and some compa-
While these disasters make headlines, there are nies are struggling just to survive, an IT disaster
hundreds of other businesses harnessing IT and the can threaten a company’s existence.
data within IT systems to sustain industry-leading
positions. Harrah’s Entertainment, for example, Building Effective IT Governance
has redefined the gaming industry using customer During sustained periods of change, old systems
relationship management (CRM) applications to can fail. Many companies formed IT governance
capture customer data at each touch point. When councils to prevent IT disasters and improve the
a customer enters a resort and casino, Harrah’s management of day-to-day operations.1 Primarily
1
IT governance is defined as the controls, processes, and operating organizations that ensure technology enables the business strategy at an effective cost.
1. IT is viewed as a strategic business asset and managed company’s unique strategy and organization structures;
as a portfolio. IT assets and investments are evaluated in this is critical to overall IT effectiveness.
a portfolio management approach, recognizing the value
and risks of different IT assets. 5. IT is an essential part of corporate planning and strategy.
IT has a seat at the corporate planning table, demonstrat-
2. Technology ignorance is not accepted. IT participates ing a keen understanding of a broad range of business
in technology investment decisions. IT executives are issues and providing creative and cost-effective solutions.
held to the same high standards as other business
functions—they manage technology innovation and 6. IT plays an active leadership role in transformation and
adoption to optimize business value. innovation. Given its involvement in all aspects of a
business, IT has a unique vantage point to steer inno-
3. IT has board of director-level oversight and clear exe- vation within business operations, and shares this role
cutive leadership. Members of the board and executive with other business functions.
committee direct and understand major IT investments,
IT’s operational role and impact on business continuity, 7. IT’s impact on the business is measured and monitored.
and IT performance compared to peers. IT’s vital role in the business necessitates monitoring and
measuring IT performance on multiple levels— including
4. There is no “one-size-fits-all” IT governance model. benchmarking competitors— to detect industry and
The IT governance model is tailored to align with the market trends.
Efficiency Effectiveness
High
Value
Strategic
• Enhance business
leadership
Degree of impact on business strategy
productivity and
profitability
• Deliver scaleable, • Identify and enable
Strategic new strategic
flexible, and respon- partnership
• Improve service levels sive infrastructure opportunities
and cost structure
• Propel innovative
• Focus on standardi- • Provide strategic technologies into
Value creation flexibility to business the market and
zation, consolidation and capture
• Provide services to and integration operations
• Respond to changing
support ongoing business requirements
operations
Cost-effective
• Remain reactive to service delivery
needs of business
Ongoing operations
Cost
Low
Execution Visionary
These councils, with responsibilities and business cause irreparable damage to the company. The
impact comparable to those of the compliance, objectives—quality, security, reliability and main-
audit and compensation committees, report regu- tenance of existing investments — are closely
larly to the board of directors. The IT council aligned with those of the audit committee and
and board have two primary responsibilities: to incorporated into its charter.
ensure IT is aligned with the business strategy and One mistake that councils make is failing
to assess the performance of IT across several key to get the basics right and eventually losing all
areas. Let’s take a closer look at what each means. credibility. To avoid such missteps, leading com-
Ensure alignment with the business strategy. panies first make sure IT is effectively managed
The IT council and board evaluate the role of and does not fail the business — employing tactics
IT and determine whether it supports the organi- such as risk mitigation, service-level agreements,
zation’s business strategies and objectives (see and codified backup and recovery. Over time, as
figure 3). For example, Sabre’s passenger reserva- the council’s capabilities mature and evolve, it will
tion system runs daily scheduling and revenue be better positioned to work with the business
management for its many clients, including and the board as a strategic partner.
American Airlines. Such a system must have Assess IT performance. The next step is setting
fail-safes to protect against a failure that could the right agenda and topics for the IT council and
Figure 4
Key questions to identify initial areas of focus for IT governance
Functional IT leadership
Enterprise perspective
More
Typically higher costs Increased standardization Less responsive to users
ownership and business units
More variability (business unit) Improved visibility
(in IT competencies) into costs
No business-unit ownership
More responsive Increased scale
Poor integration economies
to diverse needs
and infrastructure Not aligned with the business
Less standardization
More control Critical mass
Few synergies over priorities of skills Slower time-to-market
Pooled experience
Synergies
Decentralized Centralized
Business unit
autonomy Federation Enterprise-wide
At the other extreme is business unit autonomy, teristics of the two extremes (see figure 5).
which allows individual business units to control It establishes alliances and formal governance
their own IT resources and strategic direction— processes not only to realize enterprise-wide
an approach that enables IT delivery for discrete opportunities but also allow business units to
business units with unrelated business needs and control their own IT needs. We introduced this
capabilities. There are pros and cons to both approach at a $40 billion U.S. conglomerate
approaches. With the enterprise-wide model, com- where previously the IT group and management
panies can cut costs, improve operability and main- team communicated only when systems went
tenance; but they may sacrifice responsiveness to down. The IT group was forced to solve issues in
end-users and business units. The autonomy model an unwieldy systems environment that stretched
allows business units to be independent, which across dozens of business units.
facilitates responsiveness and speed to market, but This company had previously tried both the
can result in higher costs and less standardization. enterprise-wide model headed by a CIO and the
The third governance model, federation, business unit autonomy model, but neither
attempts to incorporate the most positive charac- approach delivered benefits or facilitated effective
coordination. Using the federation model, the strategies depends heavily on IT, and 71 percent
company established an IT leadership council that say that investment in IT is proposed with the
included representatives from both IT and business associated return on investment (see figure 6). But
units across the firm. Council members developed thinking that IT should be aligned with the busi-
a long-term strategy and wrote a mission statement ness and actually aligning it are entirely different
to better leverage IT opportunities throughout the matters. In a separate A.T. Kearney research effort,
company and to support long-term business unit only one-third of the companies researched cate-
strategies. The council, now part of the larger over- gorize their IT planning as “aligned” with business
all business-governance process, continues to meet strategy. These findings highlight the need for
regularly and has defined areas where it can build two-way communications in which IT shapes the
IT synergies across all business units. direction of the business and the business shapes
5. IT is an essential part of corporate the strategic course for IT. Such direction-setting
planning and strategy. Almost 85 percent of occurs in two scenarios: shaping daily demand for
companies, according to a recent survey, have a IT and establishing regular corporate strategy and
formal IT governance structure, or are actively planning processes.
developing one. Roughly 72 percent of business For instance, the IT group ensures that new
executives believe the success of their business demand for IT is in line with technology
7. IT’s impact on the business is measured IT’s impact after implementation. Without track-
and monitored. The final habit of effective IT ing, most companies miss the opportunity to
governance is measuring the quality and cost- quantify what works and fix, replace or discon-
competitiveness of the IT capability, treating it as tinue those IT systems that do not support
any other vital aspect of the business. In the past, profitability.
measuring IT performance mostly involved track- Sound IT governance requires answering two
ing technical performance (uptime and number questions: How effectively is IT delivering the
of severe events) and costs (IT spending as required services to the business? How do the
a percentage of revenues or per user). This data company’s IT processes and performance compare
was not only limited but also typically viewed to peers and best practice companies?
only by IT professionals. To answer the first question, perform a total
Today, measuring IT performance has cost of ownership (TCO) analysis. A proper TCO
improved, but is still not ideal. According to calculation will document a true 360-degree view
Gartner, only 40 percent of companies measure of the IT function, including costs, improvement
Copyright 2008, A.T. Kearney, Inc. All rights reserved. No part of this work may be reproduced in any form
without written permission from the copyright holder. A.T. Kearney® is a registered mark of A.T. Kearney, Inc.
A.T. Kearney, Inc. is an equal opportunity employer.
PDF ATK808051