Your case study must require a nontrivial underlying IT/IS as an essential capability for its operation. The IT/IS capability must be reasonably complex. One way to determine whether an IT/IS capability is reasonably complex is to think in terms of entities and relationships for your case study’s model. A reasonable IS complexity is at least ten entities and ten relationships. You may have to make assumptions to complement your facts. For your underlying IT infrastructure, consider the different IT teams. Is there a Chief Information Officer (CIO)? Is there a Chief Technology Officer (CTO)? Is there an IT planning and management team, including a program management office (PMO) and project managers? Is there an R&D team? Is there an IT testing team? Is there an IT operations and deployment team? Is there an IT support and maintenance team? Is there an IT-related customer product or service team? What does the IT infrastructure consist of? Consider hardware, including servers, network elements, and interconnection devices and media; platforms, such as database management systems, and IS/networking security systems; software, including systems software and application software; and the IT needs for engineering services and support. You may have to make assumptions to complement your facts. In your research, you may want to think in terms of use cases for your IS (whether it is internal as an essential support IS or part of the core products and services sold to customers). Think of use cases as transactions that different end users will invoke when interacting with your case study’s IS. Finally, you must submit your area of study to the professor via e-mail and have your professor’s approval that you may go ahead with your selection. Once you have selected your study area and case and have received approval from your professor, you may proceed to the next steps described below. Create a report that focuses on the IT/IS used to support the operation of your organization in your case study and answer the following questions. Conduct a preliminary review of your case study’s organization. This review should include business mission, organizational structures, culture, IS, products and services, infrastructure and applications, people, skills, and competencies. Explain the need for an IT audit of your organization. Support your analysis in IT governance terms. Identify the stakeholders for your case study. Identify enterprise goals and IT-related goals for your case study and then create a mapping of the two sets, indicating primary relationships and secondary relationships. Start developing an IT audit plan that addresses the following components: Define scope, state objectives, structure approach, provide for measurement of achievement (identify the areas you intend to measure; specific metrics will be addressed later), address how you will assure comprehensiveness, and address how you will provide approach flexibility. To be able to continue with the IT audit for your case study and determine how to arrive at a stronger IT/IS assurance for your organization, you need to first finalize your auditing framework. This week, as part of the final project, you will perform the following tasks: Discuss how you will apply a single auditing framework like COBIT 5 to structure your IT audit. Describe the IT audit procedures that you will rely on in your IT audit. Start defining a balanced scorecard that lists IT-related goals and tracks some performance metrics against the goals. Review and revise your IT audit plan as needed by improving components in your plan based on additional insight you have developed.
AssignmentTutorOnline
