IT Project Governance and PRINCE2 Project Management

Lifecycle & Methodology | By Alan Calder | Read time minutes

A purple illustration showing a team of five people working together at two desks on laptops

In today's fast-changing information economy, IT project governance has emerged as one of the most vital corporate responsibilities. The relentless pressure to innovate whilst simultaneously driving down costs means that organisations are increasingly betting the farm on the successful development and deployment of new IT systems.

However, the business environment now evolves so quickly that the original assumptions on which projects were based can often become fatally undermined before the project's completion. With technology at the heart of most businesses, the ability to maintain tight executive and board control over such projects throughout their lifecycle has become a deciding factor in determining which businesses thrive and which flounder.

PRINCE2 project management is one of the world's leading methodologies for ensuring that IT projects stay on track and deliver real value in response to this challenge.

No large scale or business-critical project should ever be managed on a standalone basis. The need to involve and secure buy-in from functions across the organisation means that a project governance approach is essential. While project management is the critical discipline within this, project governance is broader in scope and has six interlinked objectives:

  1. Ensuring real business value through project and business alignment.
  2. Controlling costs through centralisation.
  3. Maximising resource allocation, particularly of high-value resources.
  4. Risk management through portfolio balancing.
  5. Uniform application of best practice.
  6. Organisational coherence.

IT decisions expose an organisation to significant financial, operational and competitive risks, so project governance must be a concern for the board as a whole, rather than any one individual.

The board must insist that project risks are assessed within the organisation's strategic planning and risk management framework and ensure that the right investment and management decisions are made to enhance competitive advantage and deliver measurable business value.

The board's project governance responsibilities can be summarised as follows:

  • To approve product initiation, manage the project portfolio and pull the plug on any under-performing projects.
  • To make one or more non-executive board members specifically responsible for overseeing project governance. They must have independent and informed oversight of progress on all business IT projects - including attending the programme (or large project) board meetings.
  • To ensure clear accountability at all levels, with detailed, rigorously tested project plans based on a critical path analysis with clearly identified critical success factors, regular milestones and go/no go checkpoints.
  • To ensure that every project proposal contains a full business case with a fully costed estimate that can stand up to independent audit, with clearly stated assumptions that can withstand rigorous analysis.
  • To manage all IT related projects as part of a portfolio.
  • To adopt and deploy a recognised project management methodology.
  • To adopt a clearly defined risk management plan at the programme and project level that reflects corporate-level risk treatment requirements.
  • To institute a monitoring framework to inform the board of progress and provide an early alert of divergence or slippage in any critical success factors.
  • To commit funding only on a phased basis.
  • To ensure that internal audit is capable and accountable directly to the board for providing regular, timely and unambiguous reports on project progress, slippage, budget, requirements specification and quality requirements. Where there is project divergence, the board should not release further funds until the cause of the divergence has been dealt with fully.

A very popular project management methodology is PRINCE2, the successor to PRINCE (Projects in Controlled Environments), which the UK Office of Government Commerce developed. While PRINCE was created initially for IT projects, PRINCE2 project management has incorporated substantial feedback and is now a generic, best-practice approach for all types of projects. Since its introduction in 1989, PRINCE2 project management has become widely used in the public and private sectors and is now a global standard.

PRINCE2 project management uses a structured methodology, which means managing a project logically and organised, following clearly defined steps and well-understood roles and responsibilities. It perfectly matches the requirements of a project governance regime by delivering the following attributes to any project:

  • A controlled and organised start, middle and end.
  • Regular reviews of progress against the plan and the business case.
  • Flexible decision points.
  • Automatic management control of any deviations from the plan.
  • The involvement of management and stakeholders at the right time and in the right place during the project.
  • Good communications channels between the project, project management, and the organisation.

The effectiveness of PRINCE2 project management results from its four cornerstones, which define what a successfully managed project should be:

Planned: PRINCE2 has a series of processes covering all the activities needed on a project, from starting up to closing down. Each process is defined with its key inputs and outputs and the specific objectives to be achieved and activities to be carried out. This process-based approach provides an easily tailored and scalable method for managing all types of projects.

Controlled: PRINCE2 project management divides a project into manageable stages, enabling efficient control of resources and regular progress monitoring throughout. The various roles and responsibilities for managing a project are fully described and are adaptable to suit the size and complexity of the project and the organisation's skills.

Results-driven: Project planning using PRINCE2 is product-based. The project plans are focused on delivering results and are not simply about planning when the project team will do the various activities on the project.

Measured: Any project using PRINCE2 is driven by the business case, which describes the organisation's justification, commitment and rationale for the deliverables or outcome. The business case is reviewed regularly to ensure the business objectives, which often change during the project's lifecycle, are still being met.

There are clear reasons why PRINCE2 project management has become a world-leading methodology. In addition to its best practice approach for managing all project types, around 5,000 people per month take PRINCE2 project management examinations, with all training carried out by accredited organisations. It is widely used and popular in both public and private sectors and can be tailored easily to all varieties of projects in many different markets and businesses. For any organisation that is serious about managing its IT investment, PRINCE2 project management is a natural choice.


Alan Calder is CEO of IT Governance Limited, the world's most comprehensive publisher and distributor of books, tools, information and advice on governance, risk and compliance. The company is a complete one-stop-shop for information on project governance and PRINCE2. It offers a wide range of books, manuals, tools, software and distance learning resources, including proprietary and third party materials. Its materials are written in plain English and are intended for generalist business readers as well as governance and project management practitioners.


Recommended read: The History of PRINCE2, by Duncan Haughey.

What's Next?

You may also be interested in