What is the role of IT Governance, Risk and Compliance leader in organization? Who should be the right person form the role? How IT strategy align with business strategy? How you can ensure that your company stay on track to achieve goals and be beneficial? IT stays more & more complicated so how you can measure IT’s performance? Many regulations govern data, technology and the whole market sectors... IT GRC Officer role can address all of these issues.

1. IT Governance Officer
Manifesto
Design
the Future
by Tadeusz Kifner

2. Design
the Future
by Tadeusz Kifner
IT Governance Officer
IT Governance, Risk & Compliance Officer
IGO
IT GRC Officer

3. Regulator pressures is
boosting investment in IT
compliance.
IT compliance is driving
cultural change in IT.
W W W . K U L T U R A I T . P L
Design
the Future
by Tadeusz Kifner

4. Insurance management of IT
Identify tech-business risks
Tell the board and C-level
management where they should focus
& spend money
Argue & fight to deliver right balance
between control & effectiveness
Manage IT Risks on daily basis
Influence & challenge
Develop compliance strategy
IT GRC Officer
GRCMANIFESTO
Design
the Future
by Tadeusz Kifner

5. Operational risk balance
Internal audit support
Defining compliance strategy
Review IT operations & SDLC
discipline
Oversight of change management
Building credibility with regulators
IT GRC aims
GRCMANIFESTO
Design
the Future
by Tadeusz Kifner

6. GRCMANIFESTO
Leadership in IT GRC domain
Advanced understanding by business
of digital realm
Management of regulations on a day
to day basis
Balance between tech investments
and business benefits
IT GRC needs
Design
the Future
by Tadeusz Kifner

7. GRCMANIFESTO
IT GRC attitude
Reporting relationships - access to C-level
Focus on protecting the brand, customers,
processes, reputation and assets
Obtain sufficient budget and support to
invest in IT
Rely on strong IT team
Look for IT culture values
Empowers all employees
Add controls into IT systems & processes
Treat information as an asset
Design
the Future
by Tadeusz Kifner

8. GRCMANIFESTO
Cyber security
Anti-money laundering
Technology debt
Vulnerability
Data integrity
Digital services shift
Cognitive services
Cloud
Rise of AI machines
Facing challenges
Design
the Future
by Tadeusz Kifner

9. IT GRC Officer
from consulting
from risk and audit units
from IT Unit
... but who? -> Auditor, Architect, Security, Project Leader
Design
the Future
by Tadeusz Kifner
Who will be the rigth person for the role?
IT GRC Officer needs competencies cross all IT
domains

10. Transfroming the role
of IT GRC Officer...
IT Advocate
Feel Business
Business Supporter

11. G
R
IT GRC Capabilities
IT controls assessment and measurement
IT governance activities & frameworks
IT risk assessment / IT control benchmarking
IT audit & self-assurance
GRC Training
IT internal audit support
IT policies & procedures
IT controls and assurance
Data assurance Design
the Future
by Tadeusz Kifner

12. Regulatory and industry
requirements
Design
the Future
by Tadeusz Kifner
Maximize activities and functions of IT
organisation to support objectives of
business investment
IT delivers vision of benefits against the
strategy
Costs are optimized (not only in IT unit)
Relevant best practices are incorporated
The optimal IT investments made business
effective and efficient

13. IT GRC Results
Higher quality information
IT process optimization
Better capital allocation
Improved IT effectiveness
Protected business reputation
Reduced IT costs
01
02
03
04
05
06 Design
the Future
by Tadeusz Kifner

14. M a n a g e r i a l t e c h n i q u e s
I T M a n a g e m e n t
I T G o v e r n a n c e
W W W . K U L T U R A I T . P L
K U L T U R A L N I E O I T
www.KulturaIT.pl