AI04: Procedures Documentation & Maintenance

Description Controls KGI KPI CSF Maturity Levels

1. Description

Structured approach to the development of user and operations procedure manuals, service requirements and training materials.

[To top of Page]

2. Control Objectives



[To top of Page]

3. Key Goal Indicators



[To top of Page]

4. Key Performance Indicators



[To top of Page]

5. Critical Success Factors



6. Service Maturity Variations

0 Non-existentThere is no process in place with regard to the production of user documentation, operations manuals and training material. The only materials that exist are those supplied with purchased products.
1 (Initial/Ad Hoc)The organisation is aware that a process addressing documentation is needed. Documentation is occasionally produced, but is dispersed in the organisation, inconsistent and only available to limited groups. Much of the documentation and procedures are out of date, and there is virtually no integration of procedures across different systems and business units. Training materials tend to be one-off schemes with variable quality, usually of a generic nature and often provided by third parties, without being customised for the organisation.
2 (Repeatable but Intuitive)Similar approaches are taken with regard to producing procedures and documentation, but they are not based on a structured approach or framework. User and operating procedures are documented, but there is no uniform approach and, therefore, their accuracy and availability relies to a large extent on individuals, rather than on a formal process. Training material is available, but tends also to be produced individually and quality depends on the individuals involved. Actual procedures and quality of user support therefore can vary from poor to very good, with very little consistency and integration across the organisation.
3 (Defined Process)There is a clearly defined, accepted and understood framework for user documentation, operations manuals and training materials. Procedures are stored and maintained in a formal library and can be accessed by anyone who needs to know. Corrections are made on a reactive basis. Procedures are available offline and can be accessed and maintained in case of disaster. A process exists that specifies procedure updates and training materials to be an explicit deliverable of a change project. Despite the existence of defined approaches, the actual content varies because there is no control to enforce compliance with standards. Users are informally involved in the process. Automated tools are increasingly used in the generation and distribution of procedures.
4 (Managed and Measurable)Consistent compliance has improved the defined framework for maintaining procedures and training materials. The approach taken covers all systems and business units, so that processes can be viewed from a business perspective and are integrated to include interdependencies and interfaces. Controls exist to ensure that standards are adhered to and that procedures are developed and maintained for all processes. User feedback is collected and corrective actions are initiated when feedback scores are unacceptable. Hence, documentation and training materials are usually at a predictable, good level of reliability and availability. A formal process for using automated procedure documentation and management is implemented. Automated procedure development is increasingly integrated with application systems development, facilitating consistency and user access.
5 OptimizedThe process for user and operational documentation is constantly improved through the adoption of new tools or methods. The procedure materials are treated as a constantly evolving knowledge base which is maintained electronically using up-to-date knowledge management, workflow and distribution technologies, making it accessible and easy to maintain. The material is updated to reflect organisational, operational and software changes and is fully integrated into the business processes definition, thus supporting organisation-wide requirements, rather than only IToriented procedures.

[To top of Page]


Visit my web site