IT Strategy and Governance Training Course

Duration 10 days 20 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends IT Directors, Chief Information Officers and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-IT-040

Before you join: Participants should have practical experience in IT management, technology delivery, architecture, service management, risk, digital transformation or business planning.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

IT strategy fails when technology investment, operating decisions and governance forums are disconnected from business priorities. Organisations can spend heavily on cloud platforms, cyber controls, data programmes and suppliers while still lacking clear decision rights, measurable benefits, accountable service owners or a credible roadmap. Senior stakeholders need an IT strategy that explains where to invest, what to standardise, which risks to accept and how technology performance will be governed.

This course develops the methods required to shape, assess and govern an IT strategy. Participants assess business demand, map capabilities, evaluate current-state applications and services, design target operating models, set architecture principles, prioritise investments and build multi-year roadmaps. The course applies COBIT 2019, ITIL 4, ISO/IEC 38500 and TOGAF concepts alongside practical techniques including capability heat maps, application portfolio analysis, investment scoring, benefits maps, balanced scorecards, RACI matrices and risk registers. Participants also examine supplier governance, cloud economics, data governance, cyber resilience, service performance and technology assurance.

Delivery combines instructor briefings, sector-based cases, facilitated analysis, group decision simulations and structured application planning. Participants progressively develop an IT strategy and governance pack during the course, using a realistic organisational scenario or their own workplace context where appropriate. The final capstone requires participants to present a board-ready strategy, target operating model, investment portfolio, roadmap, governance scorecard and implementation controls. The programme runs for 10 instructor-led days, from 08:30 to 16:30, with approximately 6.5 contact hours each day. It is available in classrooms in 50+ cities or live online, and participants receive a certificate of completion.

The course is particularly suited to managers who must connect technology plans with business outcomes, risk oversight, financial discipline and executive decision-making.

What you will be able to do

  • Assess current IT capabilities, applications, services and technical debt using structured diagnostic methods
  • Design an IT governance model using COBIT 2019 principles, decision rights and accountability structures
  • Develop a target operating model covering services, roles, sourcing and workforce capabilities
  • Prioritise technology investments using weighted scoring, business cases and benefits maps
  • Construct an enterprise technology roadmap with transition states, dependencies and funding profiles
  • Establish performance scorecards using KPIs, OKRs, service metrics and governance thresholds
  • Apply risk, cyber resilience, supplier and assurance controls to strategic technology decisions
  • Present a board-ready IT strategy and governance pack with recommendations and implementation controls

Benefits of attending

For you

  • Ability to produce a defensible IT strategy rather than a technology wish list
  • Practical confidence presenting technology investment trade-offs to senior decision-makers
  • Stronger command of COBIT, ITIL, ISO/IEC 38500 and TOGAF terminology
  • Reusable methods for prioritising technology demand, risks and benefits
  • Clearer preparation for senior IT leadership, architecture and governance responsibilities

For your organisation

  • Better alignment between technology spending, corporate priorities and measurable outcomes
  • Clearer accountability for technology decisions, service ownership and risk acceptance
  • More disciplined investment selection through transparent scoring and benefits tracking
  • Reduced duplication, technical debt and unmanaged supplier dependency
  • Board-ready reporting on technology performance, risk, roadmap progress and investment decisions

Course modules

20 modules over 10 days

Participants can translate business direction into technology implications, strategic themes and decision priorities.

  • Business strategy translated into technology implications, capabilities and decision priorities
  • Value disciplines and strategic themes used to frame IT choices
  • PESTLE, Five Forces and scenario planning inform technology assumptions
  • Strategic alignment matrix links corporate objectives, capabilities and technology investments
  • Distinguishing digitisation, digital products, operational technology and core IT
  • Technology trends assessed through maturity, economics, risk and adoption timing

Participants can design governance arrangements that clarify authority, accountability and escalation routes.

  • ISO/IEC 38500 principles cover responsibility, strategy, acquisition, performance, conformance and behaviour
  • COBIT 2019 governance and management objectives mapped to accountability
  • Decision rights allocated using RAPID and a technology governance charter
  • Three lines model separates management, risk oversight and assurance
  • Board, executive and architecture forums designed with explicit mandates
  • Escalation thresholds set for investments, risks, exceptions and benefits

Participants can identify stakeholder needs and convert them into prioritised strategic requirements.

  • Stakeholder maps identify sponsors, users, regulators, suppliers and detractors
  • Interviews elicit strategic pain points, demand patterns and constraints
  • Capability heat maps expose performance gaps and investment priorities
  • Customer journey analysis identifies technology-enabled service improvement opportunities
  • Demand intake criteria classify mandatory, strategic, technical and local requests
  • Problem statements define outcomes, scope boundaries, measures and owners

Participants can produce an evidence-based assessment of the current technology estate and its gaps.

  • Current-state assessment covers applications, infrastructure, data, skills and suppliers
  • Application portfolio inventories record business fit, technical health and cost
  • Technical debt quantified using remediation effort, risk exposure and obsolescence
  • Capability maturity ratings distinguish ad hoc, managed and optimised practices
  • Baseline metrics establish cost, reliability, delivery and user-experience performance
  • Gap analysis prioritises issues against strategic objectives and risk appetite

Participants can define a target operating model for technology services, roles and accountabilities.

  • Target operating model defines services, processes, roles, locations and suppliers
  • Operating model layers connect customer journeys, capabilities and enabling technology
  • Service ownership assigns accountable leaders for outcomes, costs and quality
  • Product, platform and project delivery models compared against demand characteristics
  • Skills taxonomy identifies critical roles, proficiency gaps and workforce actions
  • RACI matrices clarify handoffs between business, IT, security and vendors

Participants can evaluate strategic technology options and establish investment principles.

  • Strategic options structured around growth, efficiency, resilience and compliance
  • SWOT analysis tests internal strengths against external technology opportunities
  • Make-buy-partner decisions assess control, capability, cost and market access
  • Cloud adoption patterns matched to workload criticality, data and economics
  • Platform strategies define reuse, interoperability, ecosystem and product boundaries
  • Strategic principles convert choices into repeatable technology investment rules

Participants can use architecture methods to guide technology choices and reduce duplication.

  • TOGAF architecture domains connect business, data, application and technology design
  • Architecture principles govern interoperability, reuse, security and technical standards
  • Reference architectures specify approved patterns for integration, hosting and identity
  • Application rationalisation uses tolerate, invest, migrate and eliminate decisions
  • Integration patterns compare APIs, events, batch transfers and shared databases
  • Technology standards catalogues control exceptions, lifecycle status and ownership

Participants can establish sourcing and supplier governance arrangements aligned to strategic requirements.

  • Service towers define scope, interfaces, service levels and retained responsibilities
  • Supplier segmentation differentiates strategic partners, commodity vendors and critical dependencies
  • Total cost of ownership compares internal, outsourced and cloud service options
  • Contract governance sets performance reviews, change control and dispute routes
  • Service integration and management coordinates multi-supplier accountability and reporting
  • Exit plans address data return, transition support and supplier concentration

Participants can prepare financially credible cases for technology investment and benefits ownership.

  • Technology cost models separate run, grow, transform and technical debt spending
  • Business cases quantify benefits, costs, risks, dependencies and ownership
  • NPV, IRR and payback calculations compare competing technology investments
  • Benefits maps trace initiatives through capabilities to measurable business outcomes
  • FinOps practices govern cloud consumption, tagging, forecasting and accountability
  • Chargeback and showback models inform service demand and investment decisions

Participants can integrate technology risk and resilience requirements into IT strategy and governance.

  • Risk appetite statements define tolerances for availability, data and third parties
  • NIST Cybersecurity Framework functions align technology controls with enterprise risks
  • Business impact analysis establishes recovery priorities, RTOs and RPOs
  • Risk registers record causes, events, impacts, controls and treatment owners
  • Control testing distinguishes design effectiveness from operating effectiveness evidence
  • Technology resilience plans cover incidents, crises, recovery and communications

Participants can define governance controls for data assets, analytics and AI-enabled services.

  • Data governance operating models assign owners, stewards, custodians and councils
  • Data quality dimensions measure accuracy, completeness, timeliness, consistency and validity
  • Master data policies define authoritative sources, matching and change controls
  • Data classification guides retention, access, privacy and protection requirements
  • AI use cases assessed for value, bias, explainability and accountability
  • Model governance establishes approval, monitoring, retraining and retirement controls

Participants can align service management arrangements with strategic value, service ownership and performance.

  • ITIL 4 service value system connects demand, value and practices
  • Service catalogues define offerings, eligibility, fulfilment times and service owners
  • SLAs, XLAs and operational level agreements align service expectations
  • Incident, problem and change practices reduce disruption and recurring failures
  • Service level metrics distinguish availability, responsiveness, resolution and satisfaction
  • Continual improvement registers convert performance evidence into prioritised actions

Participants can govern strategic delivery while balancing speed, control, risk and benefit realisation.

  • Product roadmaps sequence outcomes, releases, dependencies and decision points
  • Agile governance balances team autonomy with funding, architecture and risk controls
  • Stage-gate criteria govern major commitments, exceptions and benefit reviews
  • Scaled delivery dependencies visualised through programme boards and integrated plans
  • DevSecOps controls embed security, testing, approvals and traceability pipelines
  • Delivery assurance reviews test scope, schedule, cost, risk and benefits

Participants can prioritise, govern and monitor a portfolio of technology investments.

  • Portfolio segmentation separates mandatory, strategic, sustaining and experimental investments
  • Weighted scoring models rank initiatives against agreed investment criteria
  • Capacity planning balances demand against people, funding and supplier constraints
  • Portfolio Kanban visualises intake, assessment, approval, delivery and benefit stages
  • Investment thresholds determine delegated authority, board review and escalation routes
  • Benefits realisation reviews confirm outcomes, adoption and corrective actions

Participants can define performance measures and reporting that support executive technology decisions.

  • Balanced scorecards connect financial, customer, process and capability measures
  • OKRs translate strategic themes into measurable technology outcomes and key results
  • KPIs distinguish leading indicators, operational measures and lagging outcomes
  • Executive dashboards present trends, exceptions, forecasts and decision requests
  • Benchmarking compares unit costs, service performance and delivery throughput
  • Metric definitions establish formulas, sources, refresh cycles and accountable owners

Participants can plan assurance activities and maintain evidence for technology governance obligations.

  • COBIT 2019 design factors tailor governance components to enterprise context
  • ISO/IEC 20000 requirements inform service management control design
  • ISO/IEC 27001 control governance links risk treatment and evidence
  • Assurance plans schedule reviews of investments, suppliers, architecture and controls
  • Audit trails preserve decisions, approvals, exceptions and remediation evidence
  • Compliance obligations mapped to policies, processes, systems and accountable owners

Participants can plan organisational change required to realise technology strategy benefits.

  • Change impact assessments identify affected roles, processes, behaviours and incentives
  • ADKAR plans address awareness, desire, knowledge, ability and reinforcement
  • Stakeholder engagement plans specify messages, channels, timing and feedback loops
  • Training needs analysis maps new capabilities to role-specific learning requirements
  • Adoption metrics measure usage, proficiency, sentiment and workarounds after deployment
  • Resistance management distinguishes legitimate concerns, sponsorship gaps and implementation defects

Participants can create a sequenced technology roadmap with dependencies, milestones and governance controls.

  • Dependency maps sequence capabilities, platforms, data foundations and operating changes
  • Transition architectures define interim states, migration paths and retirement milestones
  • Roadmap horizons separate immediate commitments, medium-term increments and longer-term options
  • Critical path analysis exposes schedule constraints, assumptions and decision deadlines
  • Funding profiles align investment timing with affordability and benefit realisation
  • Roadmap governance sets refresh cadence, triggers, ownership and approval points

Participants can communicate technology strategy, trade-offs and decisions effectively to senior stakeholders.

  • Board papers frame decisions, options, recommendations, risks and requested authorities
  • Technology narratives link architecture choices to mission, customers and financial outcomes
  • Decision logs document rationale, dissent, conditions and follow-up commitments
  • Executive presentations use evidence, trade-offs, scenarios and clear calls to action
  • Stakeholder communications tailor detail, language and channels to decision rights
  • Meeting cadences integrate portfolio, risk, architecture and service governance forums

Participants can produce, defend and refine a complete IT strategy and governance pack for executive review.

  • Strategy brief states business context, strategic themes, scope and assumptions
  • Current-state findings prioritise capability gaps, technical debt and service issues
  • Target operating model assigns decision rights, service ownership and forums
  • Investment portfolio ranks initiatives using benefits, risks, costs and dependencies
  • Three-year roadmap sequences transition architectures, funding and measurable outcomes
  • Governance scorecard specifies KPIs, review cadences, thresholds and escalation paths
  • Executive presentation defends recommendations, trade-offs, risks and implementation controls

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. IT strategy assessment template
  2. Technology governance charter
  3. Target IT operating model canvas
  4. Technology investment scoring model
  5. Three-year IT roadmap template
  6. IT governance scorecard

Who should attend

  • IT Directors — responsible for setting technology direction, investment priorities and executive reporting
  • Chief Information Officers — accountable for business-aligned technology strategy and governance
  • IT Managers — translating strategic priorities into services, teams, suppliers and delivery plans
  • Enterprise Architects — connecting target architectures with business capabilities and investment roadmaps
  • Digital Transformation Managers — coordinating strategic change, benefits and cross-functional dependencies
  • Risk, Audit and Compliance Managers — overseeing technology controls, assurance evidence and governance effectiveness

Skills and tools covered

IT strategic planningTechnology governance designInvestment portfolio managementEnterprise architecture planningIT performance managementTechnology risk oversight

Tools and standards

COBIT 2019, ITIL 4, ISO/IEC 38500, TOGAF Standard

How the course runs

Training methodology

The course uses short instructor briefings to introduce frameworks, followed by case analysis, facilitated group work, decision simulations and structured application planning. Participants assess a technology estate, define governance arrangements, compare sourcing options, score investments and create roadmap components. Cases reflect issues faced by banks, government agencies, regulated firms, multinationals and service organisations. Facilitators use peer review to test assumptions, challenge trade-offs and improve executive communication. Participants apply each major method to a continuing strategy scenario before assembling the final capstone pack.

Requirements and prerequisites

Participants should have practical experience in IT management, technology delivery, architecture, service management, risk, digital transformation or business planning. They should understand their organisation's main technology services, major systems and decision-making structure. Familiarity with budgets, projects, suppliers or performance reporting is useful. The course assumes confidence reading management reports and contributing to structured discussions. Prior study of COBIT, ITIL, TOGAF, finance, cybersecurity or formal governance is not required. Coding, systems administration and advanced financial modelling are also not required.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should have experience in an IT, digital, architecture, risk, service management or business planning role. Formal COBIT, ITIL, TOGAF or finance qualifications are not required.

Bring a laptop for working with templates and preparing course outputs. Participants may also bring non-confidential examples of their technology strategy, portfolio, roadmap, service metrics or governance structure.

The course suits managers and senior specialists who shape technology priorities, operating models, investments or governance arrangements. It is especially relevant for IT directors, enterprise architects, transformation leaders and technology risk managers.

This course uses selected concepts from these bodies of practice to create an integrated strategy and governance approach. It does not seek to certify participants in a single framework or focus only on service management, audit controls or architecture design.

Participants leave with templates and a structured strategy pack that can be adapted to their organisation. The methods support upcoming budget cycles, portfolio reviews, operating model changes, supplier reviews and board reporting.

Each day runs from 08:30 to 16:30 and provides approximately 6.5 contact hours. The first part develops assessment, governance and operating model components; the later part focuses on investment, assurance, roadmaps, executive communication and the capstone.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.