0:00:00.000,0:00:03.318
[UPBEAT MUSIC]

0:00:03.318,0:00:08.060


0:00:08.060,0:00:11.180
Welcome to Global[br]Information Security Society

0:00:11.180,0:00:12.563
for Professionals of Pakistan.

0:00:12.563,0:00:17.412


0:00:17.412,0:00:20.510
[NON-ENGLISH SPEECH]

0:00:20.510,0:00:25.410
Global Information Society[br]for Professionals of Pakistan

0:00:25.410,0:00:27.400
[NON-ENGLISH SPEECH]

0:00:27.400,0:00:44.690


0:00:44.690,0:00:46.740
Governance and management of IT.

0:00:46.740,0:00:50.350
[NON-ENGLISH SPEECH][br]session 2.4.

0:00:50.350,0:00:57.230
[NON-ENGLISH SPEECH] Domain[br]2 [NON-ENGLISH SPEECH] fourth

0:00:57.230,0:01:01.310
session [NON-ENGLISH SPEECH][br]obviously it is fifth.

0:01:01.310,0:01:03.380
[NON-ENGLISH SPEECH]

0:01:03.380,0:01:23.000


0:01:23.000,0:01:28.520
Formally session 1, 2,[br]3, and 4th, 2.4 session.

0:01:28.520,0:01:31.550
[NON-ENGLISH] session[br][NON-ENGLISH SPEECH]

0:01:31.550,0:01:38.120


0:01:38.120,0:01:39.500
Portfolio management.

0:01:39.500,0:01:41.330
IT portfolio management.

0:01:41.330,0:01:43.950
[NON-ENGLISH SPEECH] investment.

0:01:43.950,0:01:45.680
Investment [NON-ENGLISH SPEECH].

0:01:45.680,0:01:49.355
Prioritization[br][NON-ENGLISH SPEECH]

0:01:49.355,0:01:53.570


0:01:53.570,0:01:56.675
Allocation, [NON-ENGLISH SPEECH]

0:01:56.675,0:02:02.090


0:02:02.090,0:02:02.900
For the alignment.

0:02:02.900,0:02:05.510
[NON-ENGLISH SPEECH]

0:02:05.510,0:02:18.740


0:02:18.740,0:02:22.010
IT department[br][NON-ENGLISH SPEECH]

0:02:22.010,0:02:40.700


0:02:40.700,0:02:44.330
Strategies [NON-ENGLISH][br]objectives [NON-ENGLISH SPEECH]

0:02:44.330,0:02:45.055


0:02:45.055,0:02:46.010
[COUGHS] Sorry.

0:02:46.010,0:02:48.393
[COUGHING] Excuse me.

0:02:48.393,0:02:50.810
[NON-ENGLISH SPEECH]

0:02:50.810,0:02:53.330
Anyways, [NON-ENGLISH SPEECH]

0:02:53.330,0:03:14.270


0:03:14.270,0:03:16.590
For example,[br][NON-ENGLISH SPEECH] easy money

0:03:16.590,0:03:22.040
[NON-ENGLISH SPEECH][br]Bitcoin [NON-ENGLISH SPEECH]

0:03:22.040,0:03:24.864
terminologies[br][NON-ENGLISH SPEECH]

0:03:24.864,0:03:27.920


0:03:27.920,0:03:29.920
Foreign exchange[br][NON-ENGLISH SPEECH] investment

0:03:29.920,0:03:32.390
[NON-ENGLISH SPEECH]

0:03:32.390,0:03:34.947
Objective [NON-ENGLISH SPEECH]

0:03:34.947,0:03:36.200


0:03:36.200,0:03:38.780
NGO [NON-ENGLISH SPEECH]

0:03:38.780,0:04:05.310


0:04:05.310,0:04:08.372
[NON-ENGLISH SPEECH]

0:04:08.372,0:04:09.310


0:04:09.310,0:04:12.042
[NON-ENGLISH SPEECH]

0:04:12.042,0:04:22.690


0:04:22.690,0:04:26.380
day-to-day operations[br][NON-ENGLISH SPEECH]

0:04:26.380,0:04:34.137


0:04:34.137,0:04:35.720
IT portfolio management[br][NON-ENGLISH].

0:04:35.720,0:04:39.430
IT portfolio management[br][NON-ENGLISH SPEECH] IT

0:04:39.430,0:04:43.150
portfolio management,[br][NON-ENGLISH SPEECH]

0:04:43.150,0:06:26.440


0:06:26.440,0:06:29.676
Inside the organization,[br]outside the organization

0:06:29.676,0:06:32.282
[NON-ENGLISH SPEECH]

0:06:32.282,0:06:50.500


0:06:50.500,0:06:58.570
So this snapshot of[br]existing status of our IT

0:06:58.570,0:07:01.587
of our organization,[br][NON-ENGLISH SPEECH] portfolio

0:07:01.587,0:07:02.170
[NON-ENGLISH].

0:07:02.170,0:07:08.350
I hope [NON-ENGLISH SPEECH] The[br]IT portfolio is distinct from

0:07:08.350,0:07:10.250
the IT financial management.

0:07:10.250,0:07:14.010
Financial management[br][NON-ENGLISH SPEECH]

0:07:14.010,0:07:48.340


0:07:48.340,0:07:53.020
It has strategic goals in[br]determining the IT direction

0:07:53.020,0:07:55.660
towards [NON-ENGLISH SPEECH]

0:07:55.660,0:08:27.340


0:08:27.340,0:08:31.360
On the basis of your[br]expertise, your portfolio,

0:08:31.360,0:08:34.179
[NON-ENGLISH SPEECH]

0:08:34.179,0:09:33.190


0:09:33.190,0:09:37.750
Redundant [NON-ENGLISH], slack[br]time [NON-ENGLISH SPEECH]

0:09:37.750,0:09:41.620


0:09:41.620,0:09:46.156
So this is what is called[br]IT portfolio management.

0:09:46.156,0:09:50.130


0:09:50.130,0:09:53.460
Key governance practices[br]in IT portfolio management

0:09:53.460,0:09:56.880
include the evaluation,[br]direction, and monitoring

0:09:56.880,0:09:59.093
of value optimization.

0:09:59.093,0:10:01.260
So [NON-ENGLISH] value[br][NON-ENGLISH SPEECH] Optimize

0:10:01.260,0:10:04.290
[NON-ENGLISH SPEECH]

0:10:04.290,0:10:08.850


0:10:08.850,0:10:13.470
So key governance practices in[br]IT portfolio management includes

0:10:13.470,0:10:15.645
[NON-ENGLISH SPEECH]

0:10:15.645,0:10:28.800


0:10:28.800,0:10:32.370
OK, IT portfolio[br]management continued.

0:10:32.370,0:10:36.180
The most significant advantage[br]of IT portfolio management

0:10:36.180,0:10:39.510
is agility in adjusting[br]investment based

0:10:39.510,0:10:43.150
on built-in feedback mechanism.

0:10:43.150,0:10:45.720
Obviously, [NON-ENGLISH SPEECH]

0:10:45.720,0:11:09.420


0:11:09.420,0:11:12.360
Implementation method[br]includes, portfolio management

0:11:12.360,0:11:15.180
[NON-ENGLISH] implement[br][NON-ENGLISH SPEECH] Number

0:11:15.180,0:11:18.900
[NON-ENGLISH], risk[br]profile analysis.

0:11:18.900,0:11:21.030
[NON-ENGLISH SPEECH]

0:11:21.030,0:11:42.490


0:11:42.490,0:11:47.370
Whatever is the[br]treatment plan you have.

0:11:47.370,0:11:50.440
Diversification of projects,[br]infrastructure and technology,

0:11:50.440,0:11:52.770
[NON-ENGLISH SPEECH]

0:11:52.770,0:13:06.120


0:13:06.120,0:13:11.040
OK, next slide[br][NON-ENGLISH SPEECH] Now over

0:13:11.040,0:13:12.300
to you.

0:13:12.300,0:13:14.930
Discussion question number 1.

0:13:14.930,0:13:19.740


0:13:19.740,0:13:21.897
Number 2 we have here.

0:13:21.897,0:14:13.110


0:14:13.110,0:14:15.210
OK.

0:14:15.210,0:14:18.735
Usually, exam[br][NON-ENGLISH SPEECH]

0:14:18.735,0:15:34.860


0:15:34.860,0:15:36.780
OK.

0:15:36.780,0:15:40.620
The merger of two organizations,[br]multiple self-developed legacy

0:15:40.620,0:15:43.100
applications from[br]both organizations

0:15:43.100,0:15:46.880
are to be replaced by[br]a new common platform.

0:15:46.880,0:15:49.290
Which of the following[br]would be the greatest risk?

0:15:49.290,0:15:52.220
Project management and[br]the progress reporting

0:15:52.220,0:15:54.890
is combined in a project[br]management office which is

0:15:54.890,0:15:56.460
driven by external consultant.

0:15:56.460,0:16:01.632
I think it's risk but it's[br]not the greatest risk.

0:16:01.632,0:16:07.190
The replacement effort consists[br]of several independent projects

0:16:07.190,0:16:10.220
without integrating the resource[br]allocation in a portfolio

0:16:10.220,0:16:12.650
management approach, the risk.

0:16:12.650,0:16:14.540
The resource of[br]each organization

0:16:14.540,0:16:17.840
is inefficiently[br]allocated while they

0:16:17.840,0:16:21.980
are being from familiarized[br]with the other companies legacy

0:16:21.980,0:16:22.560
system.

0:16:22.560,0:16:24.650
The new platform will[br]force the business area

0:16:24.650,0:16:26.900
of both organizations to[br]change their work process.

0:16:26.900,0:16:27.500
Good.

0:16:27.500,0:16:30.765
[NON-ENGLISH SPEECH]

0:16:30.765,0:16:44.810


0:16:44.810,0:16:51.710
The correct answer is[br]B. The correct answer

0:16:51.710,0:16:53.390
is the replacement[br]effort consists

0:16:53.390,0:16:57.800
of several independent products[br]without integrating the resource

0:16:57.800,0:16:59.845
allocation in a[br]portfolio management.

0:16:59.845,0:17:02.720
[NON-ENGLISH SPEECH]

0:17:02.720,0:17:31.340


0:17:31.340,0:17:33.890
To gain an understanding[br]of the effectiveness

0:17:33.890,0:17:37.970
of an organization's planning[br]and management of investment

0:17:37.970,0:17:40.750
in IT assets, an IS[br]auditor should review the?

0:17:40.750,0:17:47.690


0:17:47.690,0:17:54.860
Enterprise data model,[br]IT balanced scorecard,

0:17:54.860,0:18:01.280
IT organizational structure,[br]historical financial statement.

0:18:01.280,0:18:06.560
[NON-ENGLISH], simple,[br]straightforward answer.

0:18:06.560,0:18:12.470
Naveed Ali[br][NON-ENGLISH SPEECH] C. OK.

0:18:12.470,0:18:19.230


0:18:19.230,0:18:24.440
Ikra [NON-ENGLISH][br]answer [NON-ENGLISH] D.

0:18:24.440,0:18:26.660
[NON-ENGLISH SPEECH] Ikra[br][NON-ENGLISH] financial

0:18:26.660,0:18:27.860
background [NON-ENGLISH].

0:18:27.860,0:18:30.260
To gain an understanding[br]of the effectiveness

0:18:30.260,0:18:34.610
of an organization's planning[br]and management of investment

0:18:34.610,0:18:39.110
in IT assets, an IS[br]auditor should review the?

0:18:39.110,0:18:43.370
IS auditor [NON-ENGLISH SPEECH][br]review [NON-ENGLISH SPEECH]

0:18:43.370,0:18:44.840
Management of investment.

0:18:44.840,0:18:47.570
[NON-ENGLISH SPEECH]

0:18:47.570,0:18:58.610


0:18:58.610,0:18:59.980
Historical financial statements.

0:18:59.980,0:19:03.420
[NON-ENGLISH SPEECH] Seems good.

0:19:03.420,0:19:06.620
[NON-ENGLISH] enterprise data[br]model [NON-ENGLISH SPEECH] IT

0:19:06.620,0:19:12.650
balanced scorecard[br][NON-ENGLISH SPEECH] OK.

0:19:12.650,0:19:15.350
So [NON-ENGLISH SPEECH]

0:19:15.350,0:19:16.940


0:19:16.940,0:19:21.174
The correct answer is[br]IT balanced scorecard.

0:19:21.174,0:19:25.610


0:19:25.610,0:19:27.290
[NON-ENGLISH SPEECH]

0:19:27.290,0:19:32.465


0:19:32.465,0:19:33.920
You can read.

0:19:33.920,0:19:37.010
Concentrate on answer B,[br]the IT balanced scorecard.

0:19:37.010,0:19:43.524
[NON-ENGLISH SPEECH] IT balanced[br]scorecard [NON-ENGLISH SPEECH]

0:19:43.524,0:20:04.490


0:20:04.490,0:20:09.515
So IT balanced scorecard[br][NON-ENGLISH SPEECH]

0:20:09.515,0:20:16.190


0:20:16.190,0:20:19.430
Number [NON-ENGLISH],[br]financial growth.

0:20:19.430,0:20:23.340
Number [NON-ENGLISH SPEECH][br]internal processes.

0:20:23.340,0:20:26.700
Number [NON-ENGLISH],[br]ability to innovate.

0:20:26.700,0:20:29.240
Innovation [NON-ENGLISH SPEECH].

0:20:29.240,0:20:32.040
[NON-ENGLISH SPEECH][br]customer satisfaction.

0:20:32.040,0:20:36.500


0:20:36.500,0:20:37.000
OK.

0:20:37.000,0:20:41.500


0:20:41.500,0:20:44.250
Process maturity framework.

0:20:44.250,0:20:47.540
[NON-ENGLISH SPEECH]

0:20:47.540,0:20:51.950


0:20:51.950,0:20:54.920
Process maturity framework.

0:20:54.920,0:20:56.900
[NON-ENGLISH SPEECH]

0:20:56.900,0:26:30.010


0:26:30.010,0:26:33.160
So these are the[br]process maturity things.

0:26:33.160,0:26:35.600
[NON-ENGLISH SPEECH]

0:26:35.600,0:26:38.800


0:26:38.800,0:26:40.990
It's a life cycle[br]to complete a task.

0:26:40.990,0:26:43.290
[NON-ENGLISH SPEECH]

0:26:43.290,0:26:46.538


0:26:46.538,0:26:50.522
[COUGHING]

0:26:50.522,0:26:56.020


0:26:56.020,0:26:58.150
Sorry.

0:26:58.150,0:27:00.550
[NON-ENGLISH SPEECH]

0:27:00.550,0:27:57.790


0:27:57.790,0:27:59.350
Obviously, it was efficient.

0:27:59.350,0:28:01.510
[NON-ENGLISH SPEECH]

0:28:01.510,0:28:13.582


0:28:13.582,0:28:16.930
In another case,[br][NON-ENGLISH SPEECH]

0:28:16.930,0:28:28.740


0:28:28.740,0:28:30.990
Yes, it was effective.

0:28:30.990,0:28:33.620
[NON-ENGLISH SPEECH]

0:28:33.620,0:28:50.010


0:28:50.010,0:28:52.030
Yes, it was efficient.

0:28:52.030,0:28:53.430
[NON-ENGLISH SPEECH]

0:28:53.430,0:28:54.725
Yes, it was effective.

0:28:54.725,0:28:57.180
[NON-ENGLISH SPEECH]

0:28:57.180,0:29:01.140


0:29:01.140,0:29:03.340
It was a quality process.

0:29:03.340,0:29:05.210
[NON-ENGLISH SPEECH]

0:29:05.210,0:29:22.110


0:29:22.110,0:29:25.260
So this is called[br]process maturity.

0:29:25.260,0:29:27.122
OK.

0:29:27.122,0:29:28.830
[NON-ENGLISH] different[br]frameworks market

0:29:28.830,0:29:31.500
[NON-ENGLISH SPEECH][br]CMMI [NON-ENGLISH],

0:29:31.500,0:29:33.990
Capability Maturity[br]Integration Model.

0:29:33.990,0:29:36.420
[NON-ENGLISH SPEECH]

0:29:36.420,0:29:42.300


0:29:42.300,0:29:45.920
COBIT Process Assessment Model[br][NON-ENGLISH SPEECH] CMMI

0:29:45.920,0:29:48.826
[NON-ENGLISH SPEECH]

0:29:48.826,0:29:53.610


0:29:53.610,0:29:57.060
Maintaining consistency,[br]efficiency, and effectiveness

0:29:57.060,0:30:00.750
of IT processes require the[br]implementation of a process

0:30:00.750,0:30:01.960
maturity framework.

0:30:01.960,0:30:04.620
[NON-ENGLISH SPEECH]

0:30:04.620,0:30:29.520


0:30:29.520,0:30:32.500
Several models may be[br]encountered in the organization,

0:30:32.500,0:30:36.245
including COBIT [NON-ENGLISH][br]process assessment model.

0:30:36.245,0:30:38.760
[NON-ENGLISH SPEECH]

0:30:38.760,0:31:05.430


0:31:05.430,0:31:10.695
So they fall in about 35,[br]36, 30, 30, 37 processes.

0:31:10.695,0:31:12.755
[NON-ENGLISH SPEECH]

0:31:12.755,0:31:14.700


0:31:14.700,0:31:17.050
Stage 1, stage 2, stage 3.

0:31:17.050,0:31:19.650
[NON-ENGLISH SPEECH]

0:31:19.650,0:31:55.890


0:31:55.890,0:32:01.620
CMMI, Capability Maturity[br]Model Integration,

0:32:01.620,0:32:03.915
[NON-ENGLISH SPEECH]

0:32:03.915,0:32:49.860


0:32:49.860,0:32:52.600
So initial processes[br]are unpredictable.

0:32:52.600,0:32:55.844
[NON-ENGLISH SPEECH]

0:32:55.844,0:33:02.610


0:33:02.610,0:33:07.090
The processes are unpredictable,[br]poorly controlled, and reactive.

0:33:07.090,0:33:09.570
[NON-ENGLISH SPEECH]

0:33:09.570,0:33:47.850


0:33:47.850,0:33:51.070
Processes are unpredictable,[br]poorly controlled, and reactive.

0:33:51.070,0:33:54.465
Repeatable, [NON-ENGLISH SPEECH]

0:33:54.465,0:36:03.080


0:36:03.080,0:36:05.360
Several organizations[br]I want to name.

0:36:05.360,0:36:10.730
Allied Bank [NON-ENGLISH SPEECH][br]processes are well standardized

0:36:10.730,0:36:12.820
[NON-ENGLISH SPEECH]

0:36:12.820,0:36:14.220


0:36:14.220,0:36:16.520
They are working in silos.

0:36:16.520,0:36:19.160
[NON-ENGLISH SPEECH]

0:36:19.160,0:38:15.530


0:38:15.530,0:38:18.140
So that is called[br]optimization level 5.

0:38:18.140,0:38:20.930
[NON-ENGLISH SPEECH]

0:38:20.930,0:38:44.417


0:38:44.417,0:38:50.305
[CHUCKLES] [NON-ENGLISH SPEECH][br][CHUCKLES] [NON-ENGLISH SPEECH]

0:38:50.305,0:38:57.140


0:38:57.140,0:39:01.500
Optimize [NON-ENGLISH] according[br]to your external customers,

0:39:01.500,0:39:02.240
stakeholders.

0:39:02.240,0:39:07.020
So this is called[br]process maturity levels.

0:39:07.020,0:39:10.338
[NON-ENGLISH SPEECH]

0:39:10.338,0:39:13.190


0:39:13.190,0:39:19.202
PDCA model, Plan,[br]Do, Check, Act.

0:39:19.202,0:39:21.650
[NON-ENGLISH SPEECH]

0:39:21.650,0:40:37.145


0:40:37.145,0:40:38.510
Implement the plan.

0:40:38.510,0:40:41.705
Collecting data for[br]charting, analysis.

0:40:41.705,0:40:44.030
[NON-ENGLISH SPEECH]

0:40:44.030,0:40:51.260


0:40:51.260,0:40:54.920
I'm going for studies[br][NON-ENGLISH SPEECH]

0:40:54.920,0:41:02.990


0:41:02.990,0:41:06.130
[CHUCKLES] [NON-ENGLISH SPEECH]

0:41:06.130,0:41:20.752


0:41:20.752,0:41:24.041
[CHUCKLES] [NON-ENGLISH SPEECH]

0:41:24.041,0:42:18.076


0:42:18.076,0:42:23.560
[CHUCKLES] [NON-ENGLISH SPEECH][br]plan, do, check, act, clear?

0:42:23.560,0:42:25.720
[NON-ENGLISH] question.

0:42:25.720,0:42:28.310
[NON-ENGLISH SPEECH]

0:42:28.310,0:42:31.056


0:42:31.056,0:42:34.940
[CHUCKLES] OK,[br]quality management.

0:42:34.940,0:42:38.634
Quality management[br][NON-ENGLISH SPEECH]

0:42:38.634,0:43:13.120


0:43:13.120,0:43:17.230
The development and maintenance[br]of defined and documented IT

0:43:17.230,0:43:24.550
quality management processes[br]is evident of effective GEIT,

0:43:24.550,0:43:27.670
Governances Enterprise IT.

0:43:27.670,0:43:29.920
[NON-ENGLISH] IT governance[br][NON-ENGLISH] governance

0:43:29.920,0:43:33.355
in enterprise IT,[br][NON-ENGLISH SPEECH]

0:43:33.355,0:43:40.450


0:43:40.450,0:43:45.713
Governance in enterprise[br]IT, end-to-end organization

0:43:45.713,0:43:48.130
[NON-ENGLISH SPEECH]

0:43:48.130,0:44:00.382


0:44:00.382,0:44:01.840
Quality management[br]defined as a set

0:44:01.840,0:44:06.260
of tasks that produce desired[br]results when properly performed.

0:44:06.260,0:44:08.050
Various standards[br]provides guidelines

0:44:08.050,0:44:10.820
for governance of[br]quality management,

0:44:10.820,0:44:16.450
including those in[br]ISO 20000 series.

0:44:16.450,0:44:18.600
[NON-ENGLISH SPEECH]

0:44:18.600,0:44:31.060


0:44:31.060,0:44:34.510
Anyways, the good[br]news is the IS auditor

0:44:34.510,0:44:36.350
should be aware of[br]quality management.

0:44:36.350,0:44:40.616
However, [NON-ENGLISH SPEECH]

0:44:40.616,0:45:45.940


0:45:45.940,0:45:47.470
Statement that the[br]IS auditor should

0:45:47.470,0:45:48.800
be aware of quality management.

0:45:48.800,0:45:53.390
However, [NON-ENGLISH SPEECH][br][CHUCKLES] [NON-ENGLISH SPEECH]

0:45:53.390,0:45:57.620
The CISA exam does not test[br]specific on any ISO standard.

0:45:57.620,0:46:00.670
So [NON-ENGLISH SPEECH]

0:46:00.670,0:46:12.280


0:46:12.280,0:46:13.040
Excuse me.

0:46:13.040,0:46:15.970
Discussion question number 3.

0:46:15.970,0:46:18.090
OK, go ahead.

0:46:18.090,0:47:09.990


0:47:09.990,0:47:11.640
OK [NON-ENGLISH].

0:47:11.640,0:47:13.840
[NON-ENGLISH SPEECH]

0:47:13.840,0:48:04.350


0:48:04.350,0:48:07.300
Identify and report the[br]controls currently in place.

0:48:07.300,0:48:09.664
[NON-ENGLISH SPEECH]

0:48:09.664,0:48:23.910


0:48:23.910,0:48:28.260
Correct answer is D.[br][NON-ENGLISH SPEECH]

0:48:28.260,0:49:15.540


0:49:15.540,0:49:21.210
Process number 4, element number[br]4, identify [NON-ENGLISH SPEECH]

0:49:21.210,0:49:31.680


0:49:31.680,0:49:36.125
OK, next question[br][NON-ENGLISH SPEECH] Number 4.

0:49:36.125,0:49:50.400


0:49:50.400,0:49:54.940
[NON-ENGLISH] critical success[br]factor [NON-ENGLISH SPEECH]

0:49:54.940,0:51:10.290


0:51:10.290,0:51:14.070
Most critical success[br]factor, security program

0:51:14.070,0:51:18.210
[NON-ENGLISH SPEECH][br]Establishment of a review board.

0:51:18.210,0:51:19.700
Creation of security unit.

0:51:19.700,0:51:24.750


0:51:24.750,0:51:28.170
Effective support of[br]an executive sponsor.

0:51:28.170,0:51:30.395
Selection of a[br]security process owner.

0:51:30.395,0:51:35.100


0:51:35.100,0:51:37.140
[NON-ENGLISH SPEECH]

0:51:37.140,0:51:51.990


0:51:51.990,0:51:54.780
A is a good option.

0:51:54.780,0:51:57.593
[NON-ENGLISH SPEECH] So rethink.

0:51:57.593,0:52:02.880


0:52:02.880,0:52:05.130
[NON-ENGLISH SPEECH]

0:52:05.130,0:52:26.010


0:52:26.010,0:52:30.032
[CHUCKLES] [NON-ENGLISH SPEECH]

0:52:30.032,0:52:35.340


0:52:35.340,0:52:39.780
Correct answer is C.[br][NON-ENGLISH SPEECH]

0:52:39.780,0:52:55.020


0:52:55.020,0:53:00.780
OK, performance optimization.

0:53:00.780,0:53:02.850
Performance optimization.

0:53:02.850,0:53:06.390
Performance optimization[br][NON-ENGLISH SPEECH]

0:53:06.390,0:53:20.010


0:53:20.010,0:53:21.640
It's a balance.

0:53:21.640,0:53:28.530
It's a trade-off between the[br]highest level of performance

0:53:28.530,0:53:32.745
and the minimum[br]use of resources.

0:53:32.745,0:53:35.010
[NON-ENGLISH SPEECH]

0:53:35.010,0:55:21.411


0:55:21.411,0:55:25.163
[CHUCKLES] [NON-ENGLISH SPEECH]

0:55:25.163,0:55:30.770


0:55:30.770,0:55:32.280
[CHUCKLES] [NON-ENGLISH SPEECH]

0:55:32.280,0:55:34.290
So this is called optimization.

0:55:34.290,0:55:40.950
So maximum extract by using[br]minimum possible resources.

0:55:40.950,0:55:43.250
[NON-ENGLISH SPEECH]

0:55:43.250,0:55:46.550


0:55:46.550,0:55:48.560
Performance optimization[br]is the process

0:55:48.560,0:55:51.440
of improving both perceived[br]service performance

0:55:51.440,0:55:54.500
while bringing highest[br]productivity to the highest

0:55:54.500,0:55:56.700
level possible.

0:55:56.700,0:55:58.910
[NON-ENGLISH]

0:55:58.910,0:56:07.460


0:56:07.460,0:56:08.540
OK.

0:56:08.540,0:56:10.460
Ideally, this[br]productivity will be

0:56:10.460,0:56:13.340
gained without excessive[br]additional investment in the IT

0:56:13.340,0:56:14.450
infrastructure.

0:56:14.450,0:56:16.160
Effective performance[br]measures are

0:56:16.160,0:56:18.410
used to create and[br]facilitate action

0:56:18.410,0:56:24.110
to improve both performance and[br]GEIT, Governances Enterprise IT.

0:56:24.110,0:56:27.747
[NON-ENGLISH SPEECH] these[br]depend upon the clear definition

0:56:27.747,0:56:28.580
of performance goal.

0:56:28.580,0:56:31.362
[NON-ENGLISH SPEECH]

0:56:31.362,0:56:46.216


0:56:46.216,0:56:47.780
[COUGHS] Sorry.

0:56:47.780,0:56:51.189
[COUGHING]

0:56:51.189,0:56:56.060


0:56:56.060,0:56:58.730
[NON-ENGLISH SPEECH]

0:56:58.730,0:57:24.290


0:57:24.290,0:57:26.340
Clear definition of[br]performance goal,

0:57:26.340,0:57:28.340
the establishment[br]of effective metrics

0:57:28.340,0:57:29.570
to monitor goal achievement.

0:57:29.570,0:57:32.090
[NON-ENGLISH SPEECH]

0:57:32.090,0:57:52.760


0:57:52.760,0:57:53.920
You are on right track.

0:57:53.920,0:57:56.760
[NON-ENGLISH SPEECH]

0:57:56.760,0:58:18.500


0:58:18.500,0:58:19.230
It's great.

0:58:19.230,0:58:20.480
It's the optimization.

0:58:20.480,0:58:23.030
[NON-ENGLISH SPEECH]

0:58:23.030,0:58:37.550


0:58:37.550,0:58:41.045
Different tools and techniques[br][NON-ENGLISH SPEECH]

0:58:41.045,0:58:56.930


0:58:56.930,0:59:00.230
White belt, brown[br]belt, blue belt,

0:59:00.230,0:59:03.940
[NON-ENGLISH] then finally,[br][NON-ENGLISH SPEECH]

0:59:03.940,0:59:23.030


0:59:23.030,0:59:26.535
White belt, green belt,[br]blue belt, orange belt,

0:59:26.535,0:59:28.160
[NON-ENGLISH] belt,[br][NON-ENGLISH] belt,

0:59:28.160,0:59:28.743
[NON-ENGLISH].

0:59:28.743,0:59:30.430
[NON-ENGLISH SPEECH]

0:59:30.430,1:00:15.070


1:00:15.070,1:00:19.106
Internal processes or[br]customer satisfaction.

1:00:19.106,1:00:22.580
[NON-ENGLISH SPEECH] KPIs,[br]Key Performance Indicator.

1:00:22.580,1:00:24.260
Key performance indicator.

1:00:24.260,1:00:28.030
Key performance indicator[br][NON-ENGLISH SPEECH]

1:00:28.030,1:00:31.730


1:00:31.730,1:00:34.210
For example, [NON-ENGLISH][br]call center [NON-ENGLISH] key

1:00:34.210,1:00:37.450
performance indicator[br][NON-ENGLISH SPEECH]

1:00:37.450,1:00:56.770


1:00:56.770,1:00:59.230
Yes, he's done a good job.

1:00:59.230,1:01:01.330
[NON-ENGLISH SPEECH]

1:01:01.330,1:02:55.690


1:02:55.690,1:02:57.100
So this is called benchmarking.

1:02:57.100,1:03:03.820
Then [COUGHING] business[br]process reengineering.

1:03:03.820,1:03:07.450
Business process reengineering[br][NON-ENGLISH SPEECH]

1:03:07.450,1:04:28.090


1:04:28.090,1:04:31.570
Root Cause Analysis, RCA.

1:04:31.570,1:04:35.350
Root cause analysis[br][NON-ENGLISH SPEECH]

1:04:35.350,1:05:46.530


1:05:46.530,1:05:48.270
It was the root cause analysis.

1:05:48.270,1:05:51.000
[NON-ENGLISH SPEECH]

1:05:51.000,1:06:04.410


1:06:04.410,1:06:06.010
It was the root cause analysis.

1:06:06.010,1:06:09.240
[NON-ENGLISH] root cause[br]analysis [NON-ENGLISH SPEECH]

1:06:09.240,1:06:15.630


1:06:15.630,1:06:18.700
Life cycle cost[br]benefit analysis.

1:06:18.700,1:06:21.305
[NON-ENGLISH SPEECH]

1:06:21.305,1:06:48.240


1:06:48.240,1:06:54.670
Feasibility study, business[br]case, requirement analysis,

1:06:54.670,1:06:59.520
requirement gathering,[br]development, testing,

1:06:59.520,1:07:01.050
[NON-ENGLISH SPEECH]

1:07:01.050,1:07:59.040


1:07:59.040,1:08:00.970
This is called optimization.

1:08:00.970,1:08:03.030
[NON-ENGLISH SPEECH]

1:08:03.030,1:08:13.230


1:08:13.230,1:08:14.325
Clear, [INAUDIBLE].

1:08:14.325,1:08:18.270


1:08:18.270,1:08:23.220
Thank you very much on[br]the behalf of GISSP.

1:08:23.220,1:08:24.600
[NON-ENGLISH SPEECH]

1:08:24.600,1:08:33.235


1:08:33.235,1:08:36.630
[COUGHING] Sorry.

1:08:36.630,1:08:40.130
[NON-ENGLISH SPEECH]