Establishment of a Centralized Policy Framework for IT/IS Governance based on a PDCA method

This paper establishes the critical importance of IT governance in corporations that is heavily reliant on IT services and with substantial IT investments. It presents a comprehensive framework aimed at centralizing and enhancing IT governance, addressing key objectives such as IT alignment with organizational goals, ensuring continuous operations, efficient management of IT investments, comprehensive project management from inception to post-implementation review, compliance management, resource optimization, and the establishment of IT architecture standards. This framework is particularly relevant for government corporations, where IT services and information security are vital, however monitoring these areas can be challenging for governing boards. While IT executives may initially resist for fear of reduced flexibility due to the proposed imposition of controls, the study argues that aligning IT objectives with corporate goals ultimately benefits the organization, offering a structured approach to improve IT governance and mitigate recurring IT and information security challenges. The recommended strategy involves creating an IT Oversight Committee, alongside the implementation of a Project Management Standards Framework (PMSF), based on the Plan-Do-Check-Act (PDCA) cycle.