Home > Proactive Disclosure > Audits and Evaluations > A&E Reports > 2010-2011 > Audit of Governance of Specialized IT Resources

Audit of Governance of Specialized IT Resources

May 2010

Table of Contents | Next page

Key Dates

Prepared by the Audit and Evaluation Team

Acknowledgments

The audit team, composed of Darine Tabbal, Graça Cabeceiras and Kenneth Gourlay under the direction of Jean Leclerc, would like to thank those individuals who contributed to this project and, particularly, employees who provided insights and comments as part of this audit.

Original signed by

__________________

Chief Audit Executive

Table of Contents

• Executive Summary
• 1 Introduction
  • 1.1 Background
  • 1.2 Objective and Scope
  • 1.3 Methodology
  • 1.4 Statement of Assurance
• 2 Findings and Recommendations
  • 2.1 General Comments for Criterion 1
  • 2.2 The Governance Structure that Exists for IT is not Clearly Defined
  • 2.3 The Ownership Framework for Specialized IT Processes is not Clear
  • 2.4 General Comments for Criterion 2
  • 2.5 The Framework for Investments does not Always Handle Small Projects or Projects to Maintain Existing Operations Adequately, and it does not Provide a Mechanism for the Resolution of IT Demand Conflicts that Cross Boards
  • 2.6 No Official Criteria Exist to Decide When Program Areas Should Carry Out IT Activities Independently
  • 2.7 Architecture, Processes and Standards are not Effectively Communicated
  • 2.8 Central Repository of Information About Departmental Data does not Exist
  • 2.9 Criteria and Procedures to Determine When it is Appropriate for Program Areas to Staff IT Positions are not Adequate
• 3 Conclusion
• 4 Management Response
• Annex 1: Audit Criteria
• Annex 2: List of Background Information and Supporting Documentation
• Annex 3: Draft CIOB IM and IT Governance Model
• Annex 4: Maturity Levels
• Annex 5: Acronyms and Terms

Table of Contents | Next page