IT Governance is a process used to monitor and control key information technology capability decisions - in an attempt - to ensure the delivery of value to key stakeholders in an organization.

Here are the key points in this definition:

1. IT Governance is a process. It is not a point in time event. It is not a committee. It is not a department.
2. The objective of IT governance is to ensure the delivery of business results not “IT systems performance” nor “IT risk management” – that would reinforce the notion of IT as an end in itself. To the contrary, IT Governance is about IT decisions that have an impact on business value.
3. The process therefore monitors and control key IT decisions that might have an impact – positive or negative - on business results.
4. The concept of governance is meaningless without the recognition of both ownership and responsibility. The key stakeholders in an organization have an “ownership” stake in the organization. The management is responsible to these stakeholders.
   
   1. We must recognize the ownership stake of not just shareholders but also of the other stakeholders such as customers, vendors, employees etc.
   2. The “management,” i.e. the people entrusted with making key decisions, is responsible to these stakeholders.
5. Therefore, the objective of IT Governance is not just the delivery of risk optimized business value but also to engender the trust of the key stakeholders in the people who they have entrusted their money and/or livelihood!
   
   1. One can argue that this trust results in more business value. No doubt. But the fact remains that it is a means to that end and must be recognized independently as a motivation for IT Governance.
   2. In a sense, IT Governance acts upon the old adage of “trust but verify!”