The document outlines the key components of an IT governance and performance management process including strategy planning, budgeting, implementation, reporting, monitoring, and continuous improvement. It also discusses ensuring compliance with reporting requirements, managing user accounts, IT security, facilities controls, and key risk areas. Finally, it describes an information management strategy focused on knowledge management, governance, security, information asset management, access and use, record keeping, and data management.

1. • Strategy
Planning
Performance Improvement Management
• Budgeting and
Implementation
Planning
• Implementation
• Reporting (In-
year and annual
reporting)
• Monitoring &
continuous
Improvement
User Account
Management
IT Security
Management
Compliance
with
reporting
requirements
Usefulness Reliability
Existence
Timeliness
Presentation
Measurability
Relevance
Consistency
Validity
Accuracy
Completeness
Performance Management Process
IT Audit Process
Audit of predetermined objectives
Program
Change
Management
IT Governance
Facilities &
Environmental
Controls
Data Centre
Management
IT Service
Continuity
Key Risk Areas
• Supply Chain
• IT Controls
• Human
• Resource
Management
• Quality of Service
Delivery
• Quality of submitted
financial statements
Information Management Strategy
Knowledge Management- Extracting
value from information, analysis and reporting
Governance - policy, architecture and
direction for information and information
management
Security - confidentiality, integrity and
availability of information in line with ISO
27001 and other relevant standards.
Information Asset Management - full
lifecycle management of information as an
asset .
Information Access and Use - sharing,
licensing and use of information so
information is easy to find and able to be
exploited .
Record Keeping - ensuring legislative and
regulatory requirements are met in the
handling of information
Data Management - management, and
maintenance of the data that underlies
information
Municipal Information Management maturity level