Implementation of internal controls and optimization of IT Process Framework governance

This diploma thesis focuses on optimizing the governance mechanism for managing internal controls in the field of information technologies within a financial institution. It identifies specific weaknesses, unnecessary complexities, and duplications in the current IT Process Framework (ITPF) and proposes their systematic elimination. The author uses the analytical tool Issue Tree to precisely define problems and propose partial solution strategies. The outcomes of the thesis are implemented solution strategies that reduce the burden on the ITPF and improve the governance of the ITPF control mechanism. The original contribution lies in applying the Issue Tree method to the domain of IT control governance. The initial governance setup, as well as the optimized version, are financially quantified through cost analysis. The difference between the initial and the optimized state represents avoided costs. Furthermore, a RACI matrix is created, which forms the foundation for an internal directive and the formalization of the ITPF. The thesis contributes to the body of knowledge in IT process governance and offers a practical tool for solving complex problems, specifically those related to the efficiency of ITPF governance in a highly complex and regulated environment.