<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xml:base="http://www.itskeptic.org"  xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
 <title>The IT Skeptic - Comments for &quot;ISO38500 may be too late; the word &amp;amp;quot;governance&amp;amp;quot; is rapidly equalling &amp;amp;quot;management&amp;amp;quot;&quot;</title>
 <link>http://www.itskeptic.org/node/633</link>
 <description>Comments for &quot;ISO38500 may be too late; the word &quot;governance&quot; is rapidly equalling &quot;management&quot;&quot;</description>
 <language>en</language>
<item>
 <title>From your quotes, you are</title>
 <link>http://www.itskeptic.org/node/633#comment-2949</link>
 <description>&lt;p&gt;From your quotes, you are 100% right. Those quotes talk about management. &lt;/p&gt;
&lt;p&gt;One of the points of governance is that it&#039;s &lt;em&gt;separate&lt;/em&gt; from management - it checks up on management - it &lt;em&gt;governs&lt;/em&gt; it. The governors, sorry, the &quot;governance roles&quot;, must not have any vested interest in approving mgt decisions because it makes themselves look good: they must not &lt;strong&gt;be&lt;/strong&gt; the managers: they must be &lt;strong&gt;non-executive&lt;/strong&gt;. (The importance of non-executive directors at board level and the splitting of chairman and CEO roles is the same kind of thing; ignoring it gives us Enron. [My bid for oversimplification of the month, but I&#039;m still right.])&lt;/p&gt;
&lt;p&gt;Is it perhaps the case that true governance simply isn&#039;t happening?* - Thereby leaving the term free for those trying to advise the managers (that includes me) to use and abuse? We vendors, trainers, consultants and bloggers are less likely to get the attention and the money of the true non-executive corporate governors, so let&#039;s go for the managers. &lt;/p&gt;
&lt;p&gt;Having an International Standard won&#039;t by itself stop this dilution of the term; having CEOs and CIOs &lt;em&gt;afraid&lt;/em&gt; of governance will.&lt;/p&gt;
&lt;p&gt;* (Why might IT governance not be happening - as in, not going down to an effective level? My experience of SOX and COBIT governance efforts suggests that they all have a tendency to focus on very few controls, and even then to drop some of them when the resistance shows up. And in the case of SOX, to focus only on the ability to produce financial reports. If corporate governance is so hard, it doesn&#039;t bode well for the value of IT governance.)&lt;/p&gt;
</description>
 <pubDate>Tue, 10 Jun 2008 15:12:02 +0000</pubDate>
 <dc:creator>JoePearson</dc:creator>
 <guid isPermaLink="false">comment 2949 at http://www.itskeptic.org</guid>
</item>
</channel>
</rss>
