Management needs to understand the overall IT portfolio architecture and must know about all information resources regarding its role and condition in operating the IT process.
IT governance deals primarily with the connection between business focus and IT management of an organization. ISO/IEC 38500 provide a framework for Management in evaluating, directing and monitoring the use of IT.
a. Assess current IT process.
b. Align business strategy with IT process to ensure IT strategy achievement.
c. Perform IT risk assessment and propose mitigation plan.
d. Define resource management to manage IT resource.
e. Establish performance measurement.
f. Evaluate and improve Governance in organizations.