Governance and Service Management in IT

Corporate Governance

Governance, Auditing and Service Management in IT

    Serving IT Governance Professionals.
    ISACA got its start in 1967, when a small group of individuals with similar jobs – auditing controls in the computer systems that were becoming increasingly critical to the operations of their organizations – sat down to discuss the need for a centralized source of information and guidance in the field. In 1969, the group formalized, incorporating as the EDP Auditors Association. In 1976 the association formed an education foundation to undertake large-scale research efforts to expand the knowledge and value of the IT governance and control field. Previously known as the Information Systems Audit and Control Association, ISACA now goes by its acronym only, to reflect the broad range of IT governance professionals it serves.
    One of ISACA's strengths is its chapter network. ISACA has more than 175 chapters established in over 70 countries worldwide, and those chapters provide members education, resource sharing, advocacy, professional networking and a host of other benefits on a local level.
    Certifications provided by ISACA: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT).
    Val IT: governance framework and supporting publications addressing the governance of IT-enabled business investments.
  • Wikipedia: Val IT
    From Wikipedia, the free encyclopedia. Information Systems Audit and Control Association (ISACA).
  • IT Service Management (ITSM)
    From Wikipedia, the free encyclopedia.
  • itSMF International - IT Service Management Forum
    The IT Service Management Forum (itSMF) is the only internationally recognised and independent organisation dedicated to IT Service Management. It is a not-for-profit organisation, wholly owned, and principally operated, by its membership. The itSMF is a major influence on, and contributor to, industry ”best practice“ and Standards worldwide, working in partnership with a wide range of governmental and standards bodies worldwide. Formed in the UK in 1991, there are now national chapters in an ever-increasing number of countries.
  • IT Service CMM
    The IT Service Capability Maturity Model (IT Service CMM) is a maturity growth model aimed at providers of IT services, such as management of hardware and software, operations, and software maintenance. The structure of the model is equal to that of the Software CMM, the contents of the IT Service CMM, however, are key process areas needed for mature IT service provision.
    Currently hosted on Google Pages.
  • Service Desk (ITSM)
    From Wikipedia, the free encyclopedia.
  • Help desk
    From Wikipedia, the free encyclopedia.

SOA Governance

SOA governance is the combination of people, policies, and processes that an organization leverages to achieve the desired behavior in their Service-Oriented Architecture (SOA) adoption efforts.

  • Wikipedia: SOA Governance
    From Wikipedia, the free encyclopedia.
  • SOA Governance Refcard
    By Todd Biske, Senior Enterprise Architect with over 15 years of experience in IT. Available on DZone Refcardz. This refcard provides Enterprise Architects, senior IT managers, and SOA program managers with an overview of the considerations, approaches, and technologies necessary for successful SOA governance.
  • What is SOA governance?
    A definition from
  • SOA Governance and Service Lifecycle Management by IBM
    "SOA drives better business flexibility. SOA governance drives better business result." SOA governance is an extension of IT governance that focuses on the lifecycle of services and composite applications in an organization's service-oriented architecture (SOA).
    The function of SOA governance is to: Establish decision rights for the development, deployment, and management of new services; Monitor and report decisions for communicating governance results.
    SOA governance supplies the decision rights, processes, and policies for those activities. After a service is deployed, there must be management aspects in place to control and monitor the service.
    The IBM SOA governance lifecycle expands the governance layer of the IBM SOA Foundation into manageable components. Actions needed to establish, maintain, and enhance an effective SOA Governance framework are depicted as a lifecycle consisting of four phases: plan, define, enable, and measure.
  • WebLayers Resources on IT and SOA Governance
    Fact Sheets, Product Brochures, White papers, Presentations, Podcasts, Webcasts, Videos. By WebLayers.

ISO 20000 - IT Service Management

ISO/IEC 20000 is the first international standard for IT Service Management. It is based on and is intended to supersede the earlier British Standard, BS 15000. ISO 20000, like its BS 15000 predecessor, was originally developed to reflect best practice guidance contained within the Information Technology Infrastructure Library (ITIL) framework, although it equally supports other IT service management approaches.

ISO 20000 & ITIL

  • ITIL and ISO 20000
    ISO 20000 does not offer specific advice on how to design your processes. It is rather a set of requirements which must be met in order to qualify for certification.
    This is where ITIL comes into play: ITIL (especially version 3) is strongly aligned with ISO 20000 and offers a rather detailed collection of best practices. As a result, ITIL is a very good basis for developing ISO 20000 compliant processes.
  • ISO 20000, BS15000 and ITIL
    By Itil & ITSM World - The Itil and ITSM Directory.

ITIL - Information Technology Infrastructure Library

ITIL Version 4 - Books:
  • ITIL 4 Foundation
  • ITIL 4 Specialist - Create Deliver and Support
  • ITIL 4 Specialist - Drive Stakeholder Value
  • ITIL 4 Specialist - High-velocity IT
  • ITIL 4 Strategist - Direct, Plan & Improve
  • ITIL 4 Strategist - Digital and IT Strategy
ITIL Version 3 - Books:
  • The Official Introduction to ITIL Service Management
  • Service Strategy
  • Service Design
  • Service Transition
  • Service Operation
  • Continual Service Improvement
ITIL Version 2 - Books:
  • Introduction to ITIL
  • Service Support
  • Service Delivery
  • Planning to Implement Service Management
  • Security Management
  • The Business Perspective (Volume 1 & 2)
  • ICT Infrastructure Management
  • Application Management
  • Software Asset Management
  • Small-Scale Implementation

COBIT - Control Objectives for Information and related Technology

GRC - Governance, Risk, Compliance

GRC is a capability to reliably achieve objectives [GOVERNANCE] while addressing uncertainty [RISK MANAGEMENT] and acting with integrity [COMPLIANCE].

-- OCEG GRC Glossary

Risk Management

Business Continuity Management (BCM) & BS ISO 22301 Standard