Governance, BYOD, and the Queen Mary 2

I'm in Sydney this week with the International Standards organization working group-to promote standards for the governance of enterprise IT.

I’m in Sydney this week with the International Standards organization working group-to promote standards for the governance of enterprise IT. In 2008, I was part of the team that developed ISOIEC 38500:2008, the standard to promote effective, efficient, and acceptable use of IT in all organizations

Representatives from Australia, New Zealand, Ireland, US, UK, Korea, Japan, India, South Africa and the Netherlands attended the meeting, and the discussion turned to the large number of acronyms in our common vocabulary. One of the representatives mentioned “BYOD” so my hyperactive mind came up with a few definitions, including Bring Your Own….:

  • BYOD – Bring Your Own Drink

  • BYOD – Bring Your Own Dice (gaming)

  • BYOD – Bring Your Own Dessert (I like that one)

  • BYOD – Buy Your Own Drinks

Thanks to the advent of texting, acronyms have become part of everyday life. A trap for us all is the assumption that we understand what the acronym means. This is also true for terms such as “governance.”

“Governance” is often misinterpreted or confused with management activities, but that’s misguided. Governance is the purview and domain of top management and is well defined in the ISACA Glossary of terms definition as:

“Ensures that stakeholder needs, conditions and options are evaluated to determine balanced, agreed-on enterprise objectives to be achieved; setting direction through prioritization and decision making; and monitoring performance and compliance against agreed-on direction and objectives.”

In short, the governing body is not directly managing the work because it’s not their purview.Queen Mary

I witnessed a more practical, albeit not perfect example at the Circular Quay in Sydney harbor this morning when the Queen Mary 2 was docking. Think for a moment about how the captain works with his leadership team to govern the ship and issues directives on the route the vessel is to travel. The various teams work together to execute the directive. The captain constantly gets feedback on the position of the ship versus the directive. Should there be severe weather, the captain will evaluate the information and issue directives based on the situation.

In short, true governance is not management or execution of the tasks-it is ensuring that the performance is in line with stakeholder needs.

For those of you who would like to find out more information of the effective governance of Enterprise IT, please visit the ISACA website and look at COBIT 5, a framework for the Governance and Management of Enterprise IT.

So now that we at the ISO WG8 meeting are all in agreement on the definitions of BYOD and Governance, we can get onto the issues at hand of developing international standards. Stay tuned-it should be interesting. 

Written by

Robert Stroud

Robert Stroud is VP of innovation and strategy for IT Business Management at CA Technologies.…

Published in

View this topic
  • James Holland

    This is great. Hooray for Disney’s imagineers!


    become a new brand in the share market research with its accurate research. Proven
    itself always right whether market is bull or bear. Last week all paid clients
    booked handsome profit in NIFTY, BANKINIFTY & STOCKS. Now for the coming
    week we expect more correction can come in NIFTY as the IRAQ issue is getting
    more tense, If it happens more then you will see a sharp fall in all world marketNSE BSE, STOCK TIPSbecause as we know all world run on
    crude & most of the crude comes from IRAQ. So be ready for a sharp fall so
    sell will be the best strategy for next week also. Traders can make a sell
    position in NIFTY around 7600-7650 with stoploss 7750 for the target of
    7300-7200.One can also make a sell call NIFTY 50 stocks as per NIFTY levels. You
    can also take our two days free trial to check our accuracy. For further updates
    you can visit our website.



  • king lear

    testing comment functionality, please do not publish this

  • Rachel Macik

    Love the personal pic :)

    • CAHighlight

      Thank you!

  • Plutora Inc

    This is a good case study. 2.3 sec’s off a login transaction is big.

  • Michele Hudnall

    While the analysts were hyping DevOps, I posted the oversight of not including security as part of that discussion as you are highlighting here. Instead of just talking DevOps, it should be DOS (what’s old is new again :-) – DevOpsSec. As a previous AppDev person, it’s the app, who’s using it, why and where rather than the device and having the service available.

    As you rightly point, out Security should be baked into the solution.

    Nice Post and Timely!


    • CAHighlight

      Thank you for your feedback Michele. Agreed – security cannot be overlooked. Appreciate your input!

  • Mitesh

    I would love a printed copy

  • Lars Johansson

    I love the idea of BYOID! This makes me choose if I am almost anonymous (with my Hotmail Nicname) or official with identity from an official organisation. My Identity Provider will attach identity with right level of LoA according to the need of the Service provider.

    • CAHighlight

      Thank you for your comment. BYOID has tangible benefits for end users and relying parties but it also has to be weighed in the balance with potential risks and liability concerns. It will be interesting to see how BYOID plays out in the enterprise.