No business too small....

WhizBiz Pty Ltd is a small online trading company, which currently lacks IT governance framework.  The Director believes based on the size of the company that COBIT 4.1 is irrelevant to the organization. 

COBIT 4.1, however, and other similar frameworks, are essential in an organization as they help to bridge the gaps between business risks, technical issues, control needs and performance measurement requirements through the implementation of a solid IT structure.  IT Governance assists an organization through the domains of: Planning & Organization, Acquisition & Implementation, Delivery & Support and Monitoring. 

 

 It confuses me how a company that trades online and utilizes considerable amounts of IT data can consider the need for a CIO irrelevant to their business.  Employing qualified staff is essential in achieving strategic objectives, especially where complex systems are involved.  Given the nature of the organization and their reliance on IT facilities it is essential that the organization has a CIO to oversee the IT function. 

COBIT 4.1 is meant simply as a starting point for organizations but may be manipulated to suit different business models.  Whilst such frameworks can be costly to put in place the benefits generally exceed the costs. It is essential that organizations put in place proper IT governance frameworks to support their businesses and provide security for their intellectual property.  Without such guidelines businesses risk the occurrence of fraudulent activities and the potential loss of valuable business information. 

WhizBiz should engage the services of consultants to put in place suitable IT guidelines based on COBIT 4.1 or similar framework. Whizbiz also need to employ suitable professionals whose expertise would help to support the proper functioning of the new IT guidelines.