308. The chief executive officer should appoint a person responsible for the management of ICT who –
(a) serves as a bridge between ICT and the business;
(b) understands the accountability and responsibility of ICT;
(c) is business-oriented and understands business requirements, the long term strategy of the company and can translate these into efficient and effective ICT solutions;
(d) has a strategic approach to business and is able to foresee the integration of ICT into business strategic thinking and to develop it; and
(e) is able to exercise care and skill in designing, developing, implementing and maintaining sustainable ICT solutions.
309. The Board should monitor and evaluate significant ICT investment and expenditure by overseeing the proper value delivery of ICT, ensuring that the expected return on investment is delivered and that the information and intellectual property contained in the information systems is protected.
310. In the acquisition and disposal of ICT goods and services good governance principles should apply to all parties in the supply chain.
311. The Board should obtain independent assurance of the company’s ICT governance and controls supporting ICT services.
312. ICT risks should form part of the company’s risk management processes covered in Chapter 4.
313. Management should regularly demonstrate to the Board that the company –
(a) has adequate business resilience and strategies for disaster recovery arising from or in connection with ICT related risks;
(b) is insulated from legal suits arising from or in connection with the possession, ownership and operational use of the ICT technology by ensuring that ICT related laws, rules, codes and standards are complied with; and
(c) uses ICT to assist it in managing risks in compliance with applicable laws, rules, codes and standards.
315. Companies should publish on their websites the texts of their memorandums and articles of association and any amendments thereto, quarterly reports, audit reports, important information relating to general shareholders meetings of the company and important resolutions of the Board relating to the company’s development strategy.
316. Company disclosure, as prescribed by the law, codes and standards, should be complied with.
- According to the NATIONAL CODE ON CORPORATE GOVERNANCE ZIMBABWE