Governance and Governance of Digital Technology
Overview
In ITIL v5, governance appears in two connected ideas: organizational governance (how the whole organization is directed and controlled) and governance of digital technology (the fifth component of the ITIL Value System).
Definitions
Governance is the system by which an organization is directed and controlled.
Organizational governance applies to all aspects of the organization, including the use of digital technology and the digital product and service management system.
Governance of digital technology is a human-based system by which the current and future use of digital technology is governed. The system comprises directing, overseeing, and accountability.
Governing Body
Every organization is directed by a governing body: a person or group accountable at the highest level for performance and compliance. That may be a board of directors or executive managers when they perform governance activities. The governing body is accountable for compliance with policies and external regulations. Governance of the use of digital technology is an important part of corporate governance.
Governance Patterns
Organizations vary along authority (centralized to distributed) and assurance (structured to emergent). Organizations typically adopt one of four dominant governance patterns, shaped by their values, culture, business context, and other factors:
| Pattern | Authority | Assurance | How it works |
|---|---|---|---|
| Directive | Centralized | Structured | Top-down control, formal hierarchy, strict procedures, standardized processes. Compliance is checked through audits and formal reporting. |
| Guided | Centralized | Emergent | Central vision and strategy; local freedom in execution. Direction is set top-down, but teams have autonomy in how they implement. |
| Federated | Distributed | Structured | Multiple distributed units with delegated authority; coordination through formal structures. Each unit has significant autonomy but follows shared frameworks. |
| Autonomous | Distributed | Emergent | Self-organizing teams; decisions through peer collaboration and influence. Governance emerges from shared values and culture rather than formal controls. |
No single pattern is universally best. The appropriate governance pattern depends on the organization's complexity, culture, industry, and regulatory environment. Many large organizations use a combination of patterns across different parts of the business.
Four Activities of Governance of Digital Technology
Digital technology governance is realized through:
Engage stakeholders
Identify relevant internal and external stakeholders; ensure desired governance outcomes are understood and the governing body's accountability is agreed. Includes clear commitments on use of digital technology and data, and agreed actions if commitments are breached.
Evaluate
Evaluate the organization, its strategy, portfolios, and relationships with other parties. The governing body evaluates on a regular basis as stakeholders' needs and external circumstances evolve.
Direct
Assign responsibility for, and direct the preparation and implementation of, organizational strategy and policies. Set direction and prioritization for activity and investment; set policies for behaviour across the organization and, where relevant, suppliers, partners, and other stakeholders.
Monitor
Monitor performance of the organization and its practices, products, and services. Ensure performance aligns with policies and strategic direction.
Governance in the ITIL Value System
How governance sits in the ITIL Value System depends on scope (whole organization or units). If delegated, the governing body should still retain oversight for alignment with organizational objectives.
- Guiding principles and continual improvement apply to all components, including governance. The governing body may adopt ITIL's principles or define its own and communicate them.
- The governing body should have visibility of continual improvement outcomes and how value is measured.
Regardless of scope, the book stresses:
- Lifecycle activities and practices run in line with direction from the governing body.
- The governing body maintains oversight of the product and service management system (directly or by delegation).
- Governing body and management stay aligned through shared principles and objectives.
- Governance and management at all levels are continually improved as stakeholder expectations evolve.
Relationship to Other VS Components
| Component | Link to governance |
|---|---|
| Guiding principles | Principles shape culture; governance can adopt or align with them |
| Value chain / lifecycle | Governance directs and monitors activity across stages |
| Practices | Policies and investment set the guardrails for practice application |
| Continual improvement | Governance evaluates improvement portfolio and outcomes |
Exam Tip: For governance of digital technology, memorize the four activities in order: Engage, Evaluate, Direct, Monitor. Do not collapse them to only three.
Related Pages
- Guiding Principles (principles informing governance)
- Complexity-Based Decisions (context-appropriate governance)
- Case Study: DevOps in a Regulated Bank (governance in practice)
- ISO Alignment (compliance standards)
- Decision Guide: Governance Patterns (interactive selection)