An Integrated Framework To Implement It Governance Principles At A Strategic And Operational Level For Medium-To Large-Sized South African Businesses

Riana Goosen,Riaan Rudman

doi:10.19030/iber.v12i7.7972

Abstract

In todays technologically advanced business environments, Information Technology (IT) has become the center of most, if not all, business activities; consequently, the King III report in South Africa dedicated a chapter to IT governance principles, making senior management responsible for implementing such principles. The King IIIs implementation guidance lacks detail as to how to implement its principles. Although various guidelines in the form of IT control frameworks - models and standards - exist, it remains theoretical in nature. Companies tend to view these control frameworks on an individual basis, implementing them in an ad hoc manner, resulting in the implementation of an inefficient IT governance system that either addresses strategic areas, but not operational areas, of a business or vice versa.The purpose of this study is to develop an IT best practices integrated framework that can assist management in implementing an effective IT governance system at both a strategic and operational level. The integrated framework was developed by performing a detailed literature review of selected best practice control frameworks and its underlying processes. By combining the relevant processes of the control frameworks and aligning them to general business imperatives, IT governance principles can be implemented at a strategic level. By identifying and linking the relevant business imperatives and control areas to the access paths of an IT system, IT governance principles can be implemented at an operational level. By making use of the integrated framework, an IT governance system can be implemented at both a strategic and operational level.

Highlights

AND BACKGROUNDE ffective corporate governance principles form the foundation of any successfully managed business
Directors and management have been tasked with the responsibility of implementing information technology (IT) governance principles
The purpose of this study is to provide a practical framework that can be used to effectively implement IT governance principles at a strategic and operational level, using an integrated framework that links the controls in these levels

Summary

Introduction

AND BACKGROUNDE ffective corporate governance principles form the foundation of any successfully managed business. IT has become an integral part of the day-to-day operations of any business (IODSA, 2009) as well as being part of the strategic planning process This poses a challenge to senior management, and directors with regard to how to practically implement these IT governance requirements that appear vague, unclear (Muller, 2009), and are only addressed at a high-level. A number of best practice IT control frameworks are available to develop and implement a high quality IT governance system through which business and IT management are required to work together on its implementation. These two management groups address either strategic concepts or

Objectives

Methods

Results

Conclusion