Assurance of the execution of business controls is the primary element in sustaining an effective governance framework, as it ensures that the IT governance processes and activities are performed in accordance with the established policies, standards, and procedures. Assurance also provides feedback and monitoring on the performance, compliance, and outcomes of the IT governance framework, and identifies areas for improvement and optimization12. References := CGEIT Exam Content Outline, Domain 1, Subtopic A:
Governance Framework, Task 5: Ensure that assurance processes are established to provide confidence that the IT governance framework is designed and operating effectively.

The change management control framework is the first IT governance action to correct the problem of declining code quality and security flaws, as it defines and implements the policies, procedures, and standards for managing changes to the IT systems and software. The change management control framework also ensures that changes are authorized, tested, documented, and deployed in a consistent and secure manner12. A review of the change management control framework can help to identify and address the root causes of the security breach, and to prevent or mitigate similar incidents in the future. References := CGEIT Exam Content Outline, Domain 1, Subtopic C: Technology Governance, Task 3: Ensure that IT processes are compliant with relevant laws, regulations and contractual requirements.

The most important input for the development of a human resources strategy to address IT skill gaps is the technology direction of the enterprise, because this would help to identify the current and future IT capabilities and competencies that are required to support the enterprise's vision, mission, goals, and objectives. The technology direction of the enterprise should consider the external and internal factors that influence the IT environment, such as market trends, customer demands, innovation opportunities, regulatory requirements, and business strategies12. The human resources strategy should align the IT staff development and retention plans with the technology direction of the enterprise, and ensure that the IT staff have the relevant skills, knowledge, and experience to deliver value and performance to the enterprise12. References := ISACA, CGEIT Review Manual, 7th Edition, 2019, page 25-26.