Abstract Nowadays Universities require the implementation of practices in (IT)information technology governance issues where it involves structures, processes, mechanisms and measurement indicators for the good performance of Information Technology. In order to make a strategic alignment that defines the generation of value, and that is why this research shows the design of an IT governance. Based on model risk management and information security for Colombian public universities, for which its strategic alignment, its strategy is analysed business. Its institutional educational project in order to consolidate a model adjusted to the particular needs of each academic faculty.