1. General analysis of the audit object's management of IT investments

Transkript

1 Conclusions Efficiency in IT operations has many dimensions. The concrete issues which are of interest depend on how far development has progressed in an agency. Sweden's public sector has been intensively computerised and IT is, in many operations, a strategic resource. The audit's analyses and methods must be adapted to this situation. What it is possible for the audit to examine is also governed by its mandate. We can divide the analysis into two levels: 1. General analysis of the audit object's management of IT investments 2. Analysis of specific IT support Some starting points of a general analysis of an agency's IT operations can be: What participants are involved in the information system? At which technological level is the audit object today, and how does IT support the operational strategy? How much has been invested in IT and how well does it function? What does it cost today and how are the costs reported? Are there measures and standards to compare against? What possibilities does the audit object see of improving its operations? How does IT fit into these possibilities? What links and dependence are there in respect of regulations, other agencies and interested parties, for example the general public, industry and internal relations? What consideration must be taken, and how extensive is the audit object's independence in real terms? What changes and projects are planned? Are priorities suitable and what is the basis of the priorities? How are IT activities managed and followed-up. How strong is the interest of agency management? After an overall analysis has been made it can be meaningful to examine a specific system or investment in more detail. How the scope of the examination is defined is therefore of fundamental importance. The following is a brief description of a method which could be used: 1. Decide what shall be examined and make a clear definition of the scope. 2. Understand the operation and the aims of the IT support. 3. Define and describe the information flows or processes. 4. Identify expected benefits/beneficial effects. What shall IT provide? 5. How are these benefits connected to the goal structure of the operation? 6. Place a quantitative or qualitative value on the benefits. 7. Assess the certainty of the value. 8. Define and place a value on IT costs. 9. Conclusion: the benefits are weighed against the costs.

2 In the turbulent environment we live in today, with a continuous flow of new technologies, new expectations and a greater dependence on the actions of other participants, it is not an easy task to assess what is a good change in the long term. There is a danger that the auditor prevents a change which, in the long term, proves to be necessary. The skills and ability of the auditor to make strategic judgements are therefore extremely important. It is easy to criticise subjective judgements and to show unclear points and a lack of hard facts. It is more difficult to know what shortcomings should be accepted.

3 References K. Andrew, "How Much Should You Spend on Information Technology?", Australian Accountant Vol 16 no 7 (Aug 1991) p Eugene F. Bryan, " Information Systems Investment Strategies", Journal of information systems management, fall Butler Cox Foundation reports: Value from Information Technology: The Business Perspective. The Belfry, Wishaw, 3-5 June Getting Value from Information Technology. Research Report 75, June Lars Erik Dahlgren, Göran Lundgren, Lars Stigberg. Gör IT lönsamt, PENG - Ett praktiskt hjälpmedel för ekonomisk värdering av IT-nytta. Ekerlids Förlag J. Evans, "Getting your money's worth", Computer Weekly (Oct 1993) p. 46 Förvaltningspolitiska kommissionen (1996): Bättre grepp om bidragen (SOU 1996:180) Lorin M. Hitt, Erik Brynjolfsson. Productivity, Business Profitability, and Consumer Surplus: Three Different Measures of Information Technology Value. MIS Quarterly/June Högskolan i Örebro (1997): Elektronisk handel - möjligheter och begränsningar. En rapport om behov av forsknings- och utvecklingsarbete. The Institute of Chartered Accountants in England and Wales, "Cost and Benefits of Information Technology", 1988 L. Lawton, "Practical Aspects of Value for Money Auditing in IT", The EDP Auditors Journal vol III (1992) p E.F. McNamara, "Carrying Out a Value for Money Audit of Information Technology", The EDP Auditors Journal vol III (1992) p R. Mirani and A.L. Lederer, "Making Promises: The Key Benefits of Proposed IS systems", Journal of system manager (Oct 1993) C. Nelms, "Auditing Value for Money in IT - An Audit Approach and Program", The EDP Auditors Journal vol III (1992) p Reports from RRV (the Swedish National Audit Office) Dnr 1989:393. Rätt data? F 1991:21. IT/ADB-samverkan inom offentlig sektor - en inventerande studie.

4 Fg 1991:11. ADB i samverkan. F 1992:2. Fel data kostar! F 1993:34. Myndigheterna och informationsteknologi - IT. RRV 1994:11. Försvarets utveckling av informationssystem. RRV 1994:31. Bättre ADB-projekt. RRV (1995): Performance Auditing of the use of EDP Future Challenges (1995:15) RRV 1995:59. Informationssamverkan och IT inom miljöskyddet. RRV (1997): Revision av myndigheternas IT-verksamhet (PM ) RRV (1997): RRVs Årliga Rapport till regeringen. Avsnitt om statens informationsförsörjning och IT-användning J.W. Semich, "Here's how to quantify IT Investment Benefits", Datamation (Jan 1994) p D.R. Sheldon, "Value for Money Auditing of Information Systems", EDPACS (Nov 1990) p D.R. Sheldon, "Getting Started in Value for Money Auditing of Information Systems", EDPACS (Dec 1990) p Statskontoret (1997): Förvaltningen och demokratin i Informationssamhället (PM , dnr 30/97-5) Reports from SISU (Svenska Institutet för Systemutveckling) Thomas Falk, Nils-Göran Olve. Managing Information Technology. Rapport nr 6 - Maj Nils-Göran Olve. Ekonomisk värdering av IT-satsningar. Rapport nr 11 - Juli Mats Waltré. Enkät och intervjuundersökning om Värderingsinstrument för ITinvesteringar. Rapport nr 15 - Augusti Anders Svennefalk, Henrik Westling. Effekter på beslutsfattande och styrning från användandet av EIS: En metod för utvärdering och effekterna hos fyra organisationer som använder HAT (Highspeed Analysis Tool). Examensuppsats, Ekonomlinjen, termin 7, Universitetet i Linköping, ht Reports from Topp Management Forum LEXIT: IT 2005; Datainspektionen, 1995 LEXIT Scenario om den offentliga förvaltningens IT-användning år 2005 Elektroniska dokument och ärendehantering, En antologi i tiden; Statskontoret 1994:23. Elektronisk handel för kommuner, landsting och stat; Svenska Kommunförbundet, Elektronisk post och katalog i offentlig förvaltning, en förstudie; Statskontoret,

5 Gemensamma IT-plattformar för informationsutbyte, förstudie; Riksförsäkringsverket Spelregler för samverkan, kartläggning och förslag; Arbetsmarknadsstyrelsen, Spelregler för samverkan, en debattskrift; Arbetsmarknadsstyrelsen, Offentlighet och IT, vägledning för den offentliga förvaltningen; Statskontoret 1995:14. J. Vowler, "Where is the Profit in IT?", Computer Weekly (Feb 1992) p Ross Wesscott, "Information systems auditors' role in the enterprise process review", EDPACS, March 1995, p. 1-8 L. Willcocks and S. Lester, "Information Systems Investments: Evaluation at the Feasibility Stage of Projects", Technovation vol 11 no 5 (1991) p