Enterprises—whether public or private, large or small—increasingly understand that information is a key resource and that IT is a strategic asset and important contributor to economic success.
IT can be a powerful resource to help enterprises achieve their most important objectives. As an example, IT can represent a core driver of cost savings for large transactions such as mergers, acquisitions and divestitures. IT can enable automation of key processes, such as the supply chain, and can be the cornerstone of new business strategies or business models, thereby increasing competitiveness and enabling innovation, such as the digital delivery of products and greater customer intimacy and profitability. IT is the foundation of the networked economy that cuts through geographic locations and organisational silos to provide new and innovative ways of creating value. Most enterprises recognise information and the use of IT as critical assets that need to be governed properly.
The new report on Corporate Governance in South Africa—KING III—includes for the first time in a national governance code a principle to implement IT Governance and recommends the adoption of frameworks such as COBIT. The importance of IT Governance can also be attributed to the complex regulatory environment faced by enterprises in many industries and territories today, often extending directly to IT. The focus on financial reporting has driven a significant focus on the importance of IT-related controls. A governance framework for IT can enable complex compliance requirements to be achieved in a more effective and efficient way.
Deloitte South Africa provides a full scope IT Governance Implementation and Assurance service developed and coordinated by its IT Governance Centre of Excellence, linked to global Deloitte Corporate Governance Centre. Our competency and Centre of Excellence is organised as a National initiative involving all the firm’s service lines as appropriate. We are taking a “market led – competency driven” approach ensuring that we are focused on specific sector and clients needs, while supporting them with common solutions and approaches backed up by competent personnel.
The Deloitte Risk Advisory and Consulting practices are able to offer a one-firm approach that draws on extensive corporate governance, IT governance, strategic change, risk management, and assurance competencies. The Deloitte Risk Management School provides training and mentoring programmes in COBIT and IT Governance as well as other standards and best practices transferring our knowledge to clients to ensure efficient, client-owned and sustainable implementations.
Our unique “FIT For Business” COBIT-based assessment workshop and implementation toolkit has already helped many clients’ executive management to focus on and drive successful implementation programmes.
The Deloitte IT Governance Centre of Excellence is led by Gary Hardy and Marvin Adriaans. Gary is one of the originators of the COBIT initiative in 1992 and a key member of ISACA’s COBIT development team for the past 19 years. He is a lead developer of COBIT5 and advisor to ISACA, and author of many of the ISACA products. For the past 30 years Gary has helped many private and public sector enterprises around the world implement improved IT governance and business performance. Together they champion IT Governance nationally, along with a team of highly skilled IT Governance professionals across South Africa.
The ITG signature solution is based on FIT for Business (FFB). FFB is a “health check” management workshop based on COBIT and RISKIT principles also linked to the Deloitte Riskmap. It is an interactive tool-supported scoping workshop that identifies and prioritises current business goals and risk factors affecting the enterprise’s use of IT. High level maturity ratings are also determined and a tool is used to automatically prioritise critical COBIT processes based on importance to the business and current level of maturity. Output graphics are produced including the impact on the Deloitte Riskmap that emphasises the pervasive nature of IT and the broad impact on business risk of poor IT governance. The results can also be mapped easily to the KING III principles.
FFB includes an initial implementation toolkit.

![]()
Marvin Adriaans
Risk Advisory | IT Governance Centre of Excellence
Tel: +27 (0)83 561 9390
Email: madriaans@deloitte.co.za
![]()
Gary Hardy
Risk Advisory | IT Governance Centre of Excellence
Tel: +27 (0)82 857 0727 |
Email: gahardy@deloitte.co.za
![]()
Etienne Ward
Risk Advisory | IT Governance Centre of Excellence
Tel: +27 (0)82 416 3519
Email: etward@deloitte.co.za