What is the BEST way to determine whether IT governance is achieving intended outcomes one year after implementation?

The most effective and objective method for determining if an IT governance implementation has achieved its intended outcomes is to evaluate it against the performance measurements established in the original business case. The business case defines the expected value, benefits, and success criteria for the initiative. These criteria are translated into specific, measurable key performance indicators (KPIs). By measuring actual performance against these predefined metrics one year later, the organization can directly and quantitatively assess the realization of benefits and the achievement of the strategic objectives that justified the implementation. This aligns with the COBIT framework's emphasis on performance management and value realization.

B. Surveying stakeholder satisfaction is a valuable but subjective measure. It reflects perception rather than the full spectrum of objective outcomes like risk reduction or resource optimization defined in the business case.
C. Reviewing change drivers focuses on the organization's response to specific stimuli, which is only one aspect of governance. It does not provide a comprehensive view of the overall system's performance against its broader goals.

1. ISACA, COBIT 2019 Implementation Guide. (2018). Phase 6, "Did we get there?", focuses on benefits realization. It states, "This phase focuses on the sustainable operation of the new or improved I&T governance system and the monitoring of the achievement of expected benefits." This monitoring is performed against the success metrics defined in the business case during earlier phases (p. 31).

2. ISACA, COBIT 2019 Framework: Introduction and Methodology. (2018). The Governance System Principle "Performance Management" is detailed in Section 3.4. It emphasizes that a governance system should be managed based on performance, stating, "The COBIT performance management (CPM) model... allows users to gauge how well the governance and management system and all its components are working" (p. 23). The baseline for this gauging is established in the business case.

3. ISACA, COBIT 2019 Design Guide: Designing an Information and Technology Governance Solution. (2018). Step 3 of the design process, "Resolve inherent priority conflicts and finalize the I&T governance system design," involves selecting and prioritizing governance and management objectives. Each objective is associated with metrics to measure its achievement (pp. 31-32). These objectives and their metrics form the core of the business case's success criteria.