65 / 98
Technology and information governance
In line with King IV, technology and information governance forms
part of our governance structures, policies and procedures. It
forms part of the Group’s strategic and business processes and is
managed by the Chief Technology Officer.
The Vodacom Technology Governance Framework and Charter,
which are mapped to the IT governance principles of King IV, have
continued to be reinforced in the organisation. Each framework
element is substantiated through demonstrable processes to align
technology strategy and business needs, deliver value and
manage performance, and to strengthen information security
management, information management, risk management,
business continuity management and compliance.
Vodacom Technology Governance
Framework
Our attention in the past year has focused on putting mechanisms
in place to ensure independent assurance of services provided by
outsourced providers, and moving towards compliance of the
Protection of Personal Information Act (POPIA). King IV
acknowledges the rapid advances in technology and its potential
to result in significant disruption, opportunity and risks. King IV
recommends practices to assist the governing body with
technology and information governance. The Board will consider
the need to receive periodic independent assurance on the
effectiveness of the organisation’s technology and information
arrangements including outsourced services.
The key areas of focus during the period included:
g
g
Independent assurance of outsourced services;
g
g
Protection of Personal Information Act; and
g
g
Technology security, more specifically cybersecurity.
The planned areas of future focus relating to information and
technology governance include:
g
g
Mature King IV alignment and application;
g
g
Continued focus on independent assurance of wider outsourced
services; and
g
g
Cybersecurity.
King IV Compliance for Technology Governance
King IV Principle 12:
The board should govern technology and information in a way
that supports the organisation setting and achieving its strategic objectives
Vodacom Governance Practice (Section 5) support principle 12 to achieve good governance outcomes.
Outcomes:
Ethical Culture
Good Performance
Efficient Control
Legitimacy
Vodacom Technology Governance Framework
Roles and
Responsibilities
Includes
well-defined
Roles and
Responsibilities
and Management
Structures
1
Technology
Sustainability,
Strategy and
Business Alignment
Includes Value
Delivery; Performance
Management;
Technology
Sustainability and
Technology Strategy
and Business
Alignment
2
Technology
Project
Management and
Governance
Reporting
Includes
Technology Project
Management
Benefits Realisation
and Technology
Governance
Reporting
3
Technology
Investment
Monitoring
and Evaluation
Includes
Technology
Management
4
Technology Risk
Management
Includes
Technology Risk
Management;
Information
Security and
Business
Continuity
Planning
(including
Disaster Recovery)
5
Information Asset
Management
Technology
Compliance;
Third Parties;
Acquisition and
Disposal and
Information
Management
6
Key technology
decisions
Technology governance
processes and
procedures
Technology organisation
structure (roles and
responsibilities)
Technology strategy
enablement
Communication and
change management
Vodacom Technology Governance Enablers
61
Our business
Our performance
Our governance
Administration