Information & Communications Technologies (ICT) Taskforce IAESB - - PowerPoint PPT Presentation

Page 1 | Confidential and Proprietary Information

Information & Communications Technologies (ICT) Taskforce IAESB Meeting

New York October 24, 2018

Page 2 | Confidential and Proprietary Information

I. Obtain input on sufficiency of process used to develop learning outcomes II. Discuss CAG comments

• III. Obtain input on:
• Revised ICT learning outcomes
• Proposed ICT definitions
• Clarifying and conforming changes

Objectives For Today

ICT Taskforce

Page 3 | Confidential and Proprietary Information

ICT Project Scope Start with a clean sheet

• f paper

ICT Elements Stakeholder Outreach Breadth and depth -- extensive Non- traditional analysis Development of Learning Outcomes Unstructured data transformed into learning goals Iterative process Revise Learning Outcomes – add, modify or validate Mapping (the “audit trail”); Gap analysis New process followed Implementation Guidance Granular skills PAIB perspective

The Journey

ICT Taskforce

Page 4 | Confidential and Proprietary Information

Learning Goals

Gap analysis Proposed changes addressed Proposed changes addressed Learning Outcomes Cold Review Team DWG

Final draft LOs and revised Table As

The Process

ICT Taskforce

Page 5 | Confidential and Proprietary Information

• A. What is the Board’s point of view on the sufficiency
• f the process used to develop or revise learning
• utcomes related to ICT?

Question

ICT Taskforce

Page 6 | Confidential and Proprietary Information

Refer to Agenda Item 2-5

• B. What is the Board’s point of view on editing certain

learning outcomes to clarify and/or conform their wording?

• C. What comments, if any, does the Board have on the

edits?

Clarifying and Conforming Changes

ICT Taskforce

Page 7 | Confidential and Proprietary Information

Refer to Agenda Item 2-3

• D. What is the Board’s point of view on the new or

revised ICT learning outcomes?

• E. What comments, if any, does the Board have on the

edits?

• F. What comments, if any, does the Board have on the

definitions?

New or Revised ICT Learning Outcomes

ICT Taskforce

Page 8 | Confidential and Proprietary Information

Implementation Guidance

ICT Taskforce

Granular LOs

PAIB ICT

Page 9 | Confidential and Proprietary Information

An Example

ICT Taskforce

iii) Analyze an organization's risks

using a risk management framework.

IES 2 (f) Governance, risk management and internal control

Page 10 | Confidential and Proprietary Information

An Example

ICT Taskforce

• Analyze the efficiency and effectiveness of processes and

their contribution to the risk profile of an organization.

• Identify opportunities to use ICT in order to support

communication with those charged with governance

• Use ICT including data analytics for risk identification and

reporting to those charged with governance

• Identify responses to planned ICT failures
• Explain process or system failures that contribute to ICT risk.
• Summarise the importance of integrating ICT risk

management within an organization's risk management framework.