This article breaks down COBIT 2019's five domains (EDM, APO, BAI, DSS, MEA) and 40 governance/management objectives, mapping each to real-world pain points, control points, and implementation priorities for IT governance from strategic planning to daily operations.
This article breaks down COBIT 2019's seven interlocking components—Process, Organizational Structure, Principles & Policies, Information, Culture, People & Skills, and Tools—with concrete enterprise case studies showing how each resolves specific governance pain points like chaotic project intake, unclear accountability, and unmeasured value, enabling systematic digital transformation.
This article provides a comprehensive breakdown of COBIT 2019, the globally recognized IT governance framework that translates ISO 38500 principles into 40+ actionable processes across five domains, complete with maturity models, KPIs, and customization guidance for digital enterprises.
The article argues that 'business-led, IT-enabled' digital transformation fails due to misinterpretation: companies delegate strategy to individual departments instead of top-level governance, avoid top-driven change, expect business to specify technical details, and keep IT detached from business. Success requires top leadership, a bridging transformation office, and clear accountability: business owns value, IT owns delivery.
This article explains why IT governance—not technology—is the true differentiator in digital transformation, detailing ISO 38500's Evaluate-Direct-Monitor model, four governance pillars, the governance-vs-management distinction, common governance failures in Chinese firms, and why upgrading decision structures matters more than upgrading tech stacks.
The article explains how unchecked system proliferation and ever‑more granular approval workflows create “IT entropy” that drags down productivity, citing data‑siloes, excessive approvals and process bloat, and then outlines a governance roadmap—demand gating, risk‑based controls, RPA and efficiency dashboards—to restore real digital value.
The article explains how rapid AI, low‑code, and edge‑computing autonomy erode the CIO’s traditional gate‑keeping role, illustrates four real‑world cases of bypassed IT oversight, and proposes a four‑stage roadmap for CIOs to shift from custodians to digital orchestrators.
The article details China's regulatory push for DevOps, the launch of CAICT's organization‑level DevOps platform assessment, China Railway Investment Group's successful dual certification, and insights from its leaders on strategic benefits, implementation challenges, and future trends of enterprise‑wide DevOps adoption.
The article outlines the full lifecycle of information system audits—including scope definition, objectives, standards, procedures, evidence evaluation, reporting, and follow‑up—while detailing audit coverage areas such as IT governance, development, operations, and asset protection, and discusses their importance and emerging challenges.
China Pacific Insurance (CPIC) detailed its journey through the dual ITU DevOps international and domestic DevSecOps assessments, sharing the cultural, procedural, and technical practices that enabled it to attain a Level‑2 security delivery certification and elevate its overall risk management capabilities.
A disgruntled former infrastructure engineer at a U.S. industrial firm deleted backups, locked administrators, and demanded $750,000 in Bitcoin, leading to his arrest and highlighting the severe risks, legal consequences, and mitigation strategies associated with insider ransomware threats.
The article details China’s 2024‑2027 Information Standardization Action Plan, the CAICT’s DevOps assessment framework, and showcases how automotive firms like FAW‑Volkswagen and Chang'an have achieved top‑tier continuous delivery and system‑tool standards, highlighting key metrics and the role of international ITU standards.
This article explains the origins and concepts of IT architecture and governance, compares traditional and internet‑era enterprise structures, reviews major standards such as COBIT, ITIL and IT4IT, outlines practical governance methods, and showcases JD.com’s concrete implementation across infrastructure, applications, and organizational processes.
The article details China Civil Aviation Information Network's flight management system passing the CAICT DevOps Technical Operations Level 2+ assessment, explores the interview insights on the project's design, operational improvements, and the broader significance of DevOps standards for digital transformation in the aviation industry.
The article explains how CIOs must shift to an advisory role, build trusted relationships with business units, and actively participate in technology spending decisions to drive digital transformation, reduce redundant SaaS costs, and create value‑focused IT‑business collaboration.
This article provides a comprehensive overview of Enterprise Architecture (EA), covering its definitions, scope, key concepts, benefits, real‑world examples, relationships with other disciplines, major tooling options, and common criticisms, offering readers a solid foundation for understanding EA in modern organizations.
This article explains the TOGAF enterprise architecture framework, its evolution to version 10 with a modular agile‑focused structure, the core and extended guidance it provides, the business benefits and certification paths, salary impact, and a list of certified tools for implementation.
In the final installment of the six‑part series, the author reflects on the evolving role of enterprise architecture, noting the shift of responsibilities to varied titles, the emergence of new management frameworks from cloud vendors, and the implications for future digital transformation initiatives.
The Zachman Framework is a 36‑cell matrix that helps organizations classify and analyze enterprise architecture by mapping stakeholders, perspectives, and fundamental questions across six rows and six columns, providing a structured yet flexible ontology for managing complex IT assets.
The article explains how IT strategy must align with overall business goals, outlines essential components and common traps, discusses whether IT strategies can be copied across companies, and describes methods for assessing IT strategy execution and IT department performance.
The article explains how AIOps, built on DevOps principles and leveraging AI and big‑data analytics, helps enterprises overcome governance challenges, improve operational efficiency, and accelerate digital transformation, highlighting standards, real‑world evaluations, and key benefits such as real‑time analysis and noise reduction.
This article explains the concept of enterprise architecture, its four domains—business, application, data, and technology—and clarifies the distinct responsibilities of enterprise architects, solution architects, and domain architects, helping readers differentiate these overlapping roles in modern IT organizations.
This article explains the concept of technical architecture and enterprise technology architecture, covering reusable standards, future‑state modeling, technical domains, patterns, services, and an example of a multi‑tier transaction pattern, while also providing community resources for further learning.
In a 2020 interview at the GOLF+ IT Governance Leadership Forum, TaiKang Insurance Group detailed its DevOps transformation, highlighting a 60% deployment efficiency gain, automated testing improvements, cross‑departmental challenges, and future 2021 plans to expand automation, Kubernetes integration, and DevSecOps initiatives.
In an exclusive interview at the 2020 GOLF+ IT Governance Forum, the Deputy General Manager of China Agricultural Bank’s R&D Center explains how the bank’s DevOps initiative since 2019 has accelerated digital transformation, improved delivery speed, tackled pandemic‑era challenges, and set ambitious plans for 2021.
The 2020 GOLF+ IT New Governance Leadership Forum in Beijing highlighted industry best practices, honored ICBC senior manager Qian Xianglong as the financial sector leader, and featured an in‑depth interview where he discussed his career, 2020 DevOps achievements, and ambitious 2021 plans for standardization, tooling, and security.
The article reports how Zhongbang Bank’s Internet Financial Service Platform achieved a third‑level continuous delivery rating in the national DevOps maturity assessment, detailing the standards, interview insights, architectural choices, and measurable improvements in delivery speed, quality, and operational efficiency.
The 2020 GOLF+ IT New Governance Leadership Forum in Beijing showcased Ping An Bank's Smart Due Diligence System passing the first DevSecOps security and risk management assessment, highlighting the role of the Starlink platform in integrating DevOps practices, enhancing security, and driving industry‑wide IT governance improvements.
This article examines how Ping An Group rapidly migrated over 80% of its complex financial IT systems to the cloud between 2015 and 2020, detailing differentiated cloud strategies, unified governance, security certifications, and the resulting business agility, risk mitigation, and digital transformation benefits.
The article examines how personal grievances have led to tragic events—from a bus driver’s fatal crash to destructive IT incidents—highlighting the need for psychological care, robust security policies, and a DevSecOps mindset to prevent such revenge‑driven catastrophes.
This article explains enterprise architecture (EA) as a disciplined practice for analyzing, designing, planning, and implementing business and IT alignment, outlines major EA frameworks such as Zachman and TOGAF, describes the four architectural domains, and provides a comprehensive EA glossary.
