Introduction

Guide for policy levels

Learn how to get started with the EA Governance Framework, EA Compliance, and Digital Estate operations.

Governance and Risk Management

Explore governance and risk management policies.

Regulatory Compliance and Reporting

Learn about regulatory compliance and reporting policies.

Suppliers and Service Management

Explore supplier and service management policies.

ICT Innovation and Operations Policies and Controls

Discover ICT innovation and operations policies.

Architecto consequatur odit perferendis fuga eveniet possimus rerum cumque. Ea deleniti voluptatum deserunt voluptatibus ut non iste.


Quick start

Welcome to the EA IKT Governance Model and Compliance guide. This document outlines the essential elements of the governance framework and compliance structures within the EA. Let's get started with the core definitions and architecture setup.

Definitions of Governance and Compliance

  1. Holistic EA Governance Framework Model 2.0
    • A comprehensive framework that regulates all IKT governance in the organization.
  2. Governance Committees Chart and Roles
    • Mandates, meetings, and responsibilities.

EA Compliance and Communication

  1. EA Compliance – IKT Inter-Communication
    • Inter-communication policies, review and approval processes, and reporting structure.
  2. Policies and Forms
    • Policies related to regulatory compliance, sources, references, and communication processes.
    • Different approval levels (L1, L2, L3) and their respective responsibilities.

Policy Levels

The governance framework is organized into three policy levels:

LevelDescription
L1Policy Level 1: High-level ITMS policies, approved by the board.
L1APolicy Level 1A: Domain-specific high-level policies, approved by the board or CSSG.
L2Policy Level 2: Normal-level policies for specific domains, approved by ITLG or CSSG.
L3Policy Level 3: Operating routine policies, aligned with L1 and L2 policies.
RFRequired Form: Mandatory assessment forms for third parties.
WFWaiver Form: Grace period or waiver forms for third-party or internal processes.

You should know!

The different policy levels (L1, L2, L3) ensure structured approval processes, with each level handling different aspects of IT governance and risk management.


EA Digital Estate Operations

The digital estate includes essential components for the management and operation of EA's IT infrastructure:

  1. IKT Landscape: Overview of digital systems and their integration.
  2. EA Digital Estate Operation Pyramid: Framework for digital estate management and third-party assessment routines.
  3. Incident Management and Reporting: Detailed protocols for managing and reporting IT incidents.

Getting Help

For further assistance or to submit issues regarding governance or compliance:

Submit an Issue

If you encounter any issues, report them through the appropriate channels. For governance-related questions, submit requests to the Compliance Operations Group (COG) or the Compliance Steering Group (CSSG).


This page is designed to provide a foundational understanding of EA’s governance, compliance policies, and digital estate operations.