IT GRC Smart Adviser: Process Driven Architecture Applying an Integrated Framework

Abstract

This article is a continuation of the work presented in the Third World Conference on Smart Trends in Systems Security and Sustainability (WorldS4). In this version we focus on matching IT and business processes from different management levels by using IT-Governance (ITG) Risk and Compliance frameworks in a smart way. In fact, every information system (IS) has two main interfaces with two key systems: Operating System (OS) and Decision System (DS). Every system has his own frameworks and best practices for efficient management. IT Governance is the ability to control IT strategy implementation by ensuring business and IT alignment for profitable digital services. Also, the variety of IT Governance frameworks for each hierarchical level in the enterprise, should be efficiently deployed together in order to have coherent recommendations for IS, OS and DS users. It is why we use COBIT 5 as a strategic IT Governance framework able to match and integrate other frameworks and best practices dealing with IT services, IT risks and compliance as well. We based the proposed IT GRC smart adviser on artificial intelligence and knowledge management as technical axes. This article presents, IT Governance frameworks, their matching problems and related works. Then it proposes a smart architecture with new functionalities to match COBIT processes with other frameworks in order to cover different management levels. The technical contribution of this article is to propose and implement an IT GRC smart adviser based on many frameworks and best practices to optimize and improve IT Strategies. The simulation was presented, the obtained results were compared to human experts' decisions and big similarities were observed. The aim of this article is to integrate knowledge from many IT GRC frameworks for better IT governance in a smart and easy way.

DT4GITM - A Vision for a Framework for Digital Twin enabled IT Governance

“…Although smarter design of the IT governance system does not make the system itself smart, smart IT governance provides a starting point for the vision that we elaborate on as it exploits the opportunities offered by novel digital technologies for the digitalization of IT governance. While the resulting smart advisor tool [26] takes input from the COBIT body of knowledge, we instead aim for complementing this knowledge-based approach with a data-driven approach that takes its input directly from the governed system itself, as well as from other relevant data sources.…”