COBIT & SFIA as Organisational Design Tools

Transcription

1 COBIT & SFIA as Organisational Design Tools Daniel Merriott CMC, CGEIT, CISA, SFIA Accredited Consultant

2 About SFIA Skills Framework for the Information Age Framework for describing ICT practitioners skills Two-dimensional matrix 97 skills and 7 levels of responsibility Describes professional skills What you do, not what you know Underpinned by 4 generic factors describing Autonomy, Influence, Complexity and Business skills at each of the 7 levels of responsibility

3 Professional Skill Categories About SFIA Organised into 6 categories 362 level-specific skill descriptions Used in nearly 200 countries, in government, industry, education Uses include: assess individual skills define skills needed for jobs career planning eligibility for professional status (e.g. CITP) Strategy and Architecture Change and Transformation Development and Implementation Delivery and Operation Skills and Quality Relationship and Engagement Responsibility Level

4 About COBIT Control Objectives for Information and Related Technologies Framework to describe how enterprise IT can assist in delivering organisational objectives Focused on governance and management objectives Holistic approach extends beyond IT function Integrated framework aligns with relevant standards/frameworks.

5 About COBIT Defines a number of enablers to achieve business needs Including: 37 processes, 210 practices, 1111 activities, grouped under 7 domains

6 About COBIT Also describes roles, relationships, goal, metrics, and more Highly valuable when considering organisational design

7 Why Combine COBIT and SFIA? Operating Model Organisation Structure Processes Job Descriptions Roles SFIA Skills

8 Why Combine COBIT and SFIA? Integrated framework of processes Process goals and metrics Practices, activities Roles and relationships Skills & skill levels Levels of responsibility and accountability Current and future capability Skills management lifecycle

9 Mapping COBIT and SFIA Two large frameworks What level of detail is it useful to map?

10 Mapping COBIT and SFIA COBIT 5 Reference provides some examples of skills categories mapped to process domains

11 Mapping COBT Process Domains to SFIA COBIT5 Process Domain Evaluate, Direct and Monitor (EDM) Build, Acquire and Implement (BAI) COBIT5 Examples of Skills Categories SFIA6 Skills Governance of enterprise IT GOVN IT Governance Business analysis Project management Usability evaluation Requirements definition and management Programming System ergonomics Software decommissioning Capacity management BUAN Business analysis PRMG Project management USEV User experience evaluation REQM Requirements definition and management PROG Programming / software development HCEV User experience design HSIN Systems installation / decommissioning CPMG Capacity management

12 Mapping COBIT Process Domains to SFIA Mapping the level of the process domain is too broad / loose Insufficient detail to meaningfully map SFIA skills to roles defined in COBIT COBIT practice and activity detail is lost Multiple processes within each domain Each process involves multiple roles, practices, activities Direct correlation is difficult to see / justify Serves as a useful starting point only... We need a more detailed mapping

13 Mapping COBIT Activities to SFIA 1111 activities defined in COBIT5 Activities mapped to multiple SFIA skills / skill levels E.g. DSS01 Manage Operations DSS01.01 Perform operational procedures 1. Develop and maintain operational procedures and related activities to support all delivered services. Multiple possible SFIA mappings ASUP Application support, DBAD Database administration, RFEN Radio frequency engineering, STMG Storage management, NTAS, DCMA, SCAD, SLMO... and more

14 Mapping COBIT Activities to SFIA Estimate potential mappings too much detail! Difficult to generate meaningful results and too many results returned. Where is our just right level of detail?

15 Mapping COBIT Practices to SFIA Each practice mapped to specific SFIA skill and skill level (or a generic level of responsibility) Some practices match more than one skill or skill-level depending on context 3-4 specific skill/level combinations on average Mapping to a specific SFIA level is essential as each SFIA skill-level has it s own set of activities Management and governance accountabilities ~ SFIA levels 5-7 Operational responsibilities ~ SFIA levels 1-5

16 Mapping COBIT Practices to SFIA 210 practices, mapping to 97 skills (362 skill-level descriptions) Around 700 mapping points Sense check: meaningful lists of skills generated for a list of practices Sense check: many of the SFIA skill mappings for individual activities within a practice area are very similar Sense check: mapping from SFIA to COBIT provides meaningful results too

17 Applications of SFIA and COBIT Role and Job Descriptions

18 Applications of SFIA and COBIT Role and Job Descriptions

19 Applications of SFIA and COBIT Role and Job Descriptions

20 Applications of SFIA and COBIT Role and Job Descriptions

21 Applications of SFIA and COBIT Role and Job Descriptions

22 Applications of SFIA and COBIT Role and Job Descriptions Benefits to individuals and managers Clear responsibilities and accountabilities Identify process-based interactions with others Integrated performance measures Skills needed to perform identified Supplementary responsibilities to round out the description

23 Applications of SFIA and COBIT Organisational Capability

24 Applications of SFIA and COBIT Organisational Capability Benefits to organisational capability Holistic and integrated approach joined up thinking! Scalable and fast design approach What do we need to do? What skills and capability do we need? Do we have those skills? what is the gap? What is the risk / impact of specific capability gaps?

25 Recap and Next Steps Define your operating model Create role and job descriptions Assess your current skills Address any skills gap Determine skills needed Don t forget to adopt and adapt! 25

26 Where to look for more information SFIA is a licenced product and trademark of the SFIA Foundation COBIT is a licenced product and trademark of ISACA