1 . Policy Statement

This policy establishes the governance framework for information technology (IT) for the Government of the Northwest Territories (GNWT). It defines principles, roles, responsibilities, and review processes to ensure effective oversight, alignment with enterprise objectives, and accountability for IT governance.

2 . Principles

IT governance will be guided by the following principles:

• All stakeholder needs should be considered in the development of the enterprise objectives;
• Benefits, risks and resources should be optimized in the pursuit of the objectives; and
• Governance (setting direction, holding accountable) should be kept separate from management (planning, doing).

3 . Scope

This policy applies to:

• All GNWT departments and
•  Any other entity that is within the GNWT’s enterprise network.

4 . Definitions

• Enterprise (or Corporate): Refers to the entire GNWT, including all departments, boards and agencies.
• Records: As defined in the Archives Act.
• Information Technology (IT): this is referred to as “information management and technology” within the Financial Administration Act. However, for clarity and simplicity, we will refer to as “information technology” within the governance policy framework, which encompasses Information management and Technology management. This also includes related risks, strategies, services and projects.
  • Information includes records, recorded information and data.
  • Technology also includes software, hardware, telecommunications and broadband.

5 . Authority and Accountability

General            

The Financial Management Board delegates to the Informatics Policy Council, through FAM 115, responsibility for oversight of the implementation of the IT Governance Policy and overall leadership with respect to IT and IT policy execution in the GNWT. The Financial Management Board delegates to the Assistant Deputy Minister/Government Chief Information Officer responsibility for establishing the management framework for IT functions within the GNWT, and for providing administrative and management support to the Informatics Policy Council.

Deputy Minister, Department of Finance

Provides support, direction and assistance to Deputy Heads on this Policy and associated procedural and/or guideline issues.

Deputy Heads

Are accountable for:

• Managing information held by their department; 
• Adhering to IT policies in their department; 
• Overseeing technology-enabled projects led by their department; and
• Protecting information and any IT assets owned and operated by their department.

Are responsible for:

• Contributing to setting enterprise objectives for IT; 
• Contributing to the monitoring and reporting on enterprise objectives for IT; 
• Ensuring IT is integrated into the overall business plans of departments; and
• Ensuring IT policies are implemented in the departments

Informatics Policy Council

Is accountable for:

•  Supporting the FMB in fulfilling its responsibilities regarding oversight of information technology and
• Managing the portfolios of IT-enabled investments, services and assets, ensuring that value is delivered and risk is managed.

And is responsible for:

• Setting direction through prioritization, decision-making and policies; 
• Establishing a set of balanced, agreed-upon enterprise objectives; and
• Monitoring performance and compliance against agreed-upon objectives.

Assistant Deputy Minister/Government Chief Information Officer:

The Assistant Deputy Minister/Government Chief Information Officer (CIO) is the senior manager authorized to lead the IT function on behalf of the IPC.  The CIO is accountable to all Deputy Ministers for the overall management of the IT function in pursuit of the agreed-upon enterprise objectives. 

The CIO is authorized to establish the management framework for the IT function. The framework includes:

• Organizational structures and formal and informal reporting relationships;
• Roles and responsibilities;
• IT operational procedures; 
• Cybersecurity controls;
• Advisory bodies;
• Directives, standards, guidelines, and processes;
• Review of IT budgets for alignment to the strategic direction set by IPC;
• Input into IT leadership performance appraisals; and
• Performance management (metrics monitoring and reporting).

6 . Provisions

• A governance review will be conducted every 4–5 years or following the formation of a new legislative assembly. This review will assess effectiveness and efficiency of IT governance policies and processes.
• Performance measurement for the IT function will follow the FMB-approved Performance Measurement Framework for the Office of the CIO, which supports governance objectives.

7 . References

• FAA 7.1 (k)
• FAM 115
• Terms of Reference: Informatics Policy Council(IPC)