Information Technology Governance Framework Research Articles

The adoption of information technology governance frameworks by universities in Gauteng province, South Africa

Lately, there has been a rise in personal and commercial use of computer devices, be it mobile phones, laptops, or any other computing devices, not forgetting the network, networking peripherals, and software that these devices function with. That being said, it has led organisations and institutions of higher learning to establish and adhere to Information Technology governance frameworks set out by the government and the higher education sector. White and Greiner (2022) defined Information Technology Infrastructure Library (ITIL) as an Information Technology (IT) service management framework that outlines best practices for delivering IT services. Kidd (2019) defined Control Objectives for Information and Related Technologies (COBIT) as an IT management framework developed by the Information Systems Audit and Control Association (ISACA) to help businesses develop, organize, and implement strategies around information management and IT governance. The aim of this study was to investigate whether ITIL and COBIT, as IT governance frameworks recommended by the higher education sector in South Africa, were adopted by ICT departments in universities in Gauteng province, South Africa. Data collection was done using a questionnaire. The questionnaire was sent via email to 52 potential respondents from all the higher institutions in Gauteng. A total of 41 questionnaires were returned. The questionnaire for both ITIL and COBIT frameworks was designed using Google Forms. The study findings showed that universities in Gauteng have adopted ITIL and COBIT as ICT governance frameworks recommended by the Higher Education sector in South Africa. The study's results are crucial for university administrators as they might improve comprehension of the factors affecting the adoption, administration, and utilization of ICT resources to enhance the university's capacities

Information Technology Governance Design in Trading Companies Using the COBIT 2019 Framework

Effective information technology (IT) governance is very important for trading companies in managing their information assets well. The COBIT 2019 has been recognized as an international standard for IT governance that helps organizations achieve their strategic goals through the implementation of structured practices and processes. This research aims to design an IT governance framework based on COBIT 2019, especially for trading companies. The research methodology uses a case study approach by analyzing the unique needs and characteristics of trading companies in the IT context. The result is a design that is tailored to the needs and challenges faced by trading companies, including aspects of information security which are crucial in today's digital era. This research contributes to IT practitioners and senior managers to understand the practical and effective implementation of COBIT 2019 in improving IT governance in trading companies. By using COBIT 2019, trading companies can optimize the management of their information assets while ensuring regulatory compliance and increasing stakeholder trust.

Analisis Efektivitas Tata Kelola TI Menggunakan Framework Framework Cobit 5 pada PT Bima Mandira Abadi

This study aims to analyze the effectiveness of implementing the COBIT 5 framework in Information Technology (IT) governance in organizations. The main focus is to evaluate the extent to which COBIT 5 is able to improve IT management, operational efficiency, and the achievement of the organization's strategic objectives. This study uses a case study approach with qualitative methods. Data were collected through interviews with IT stakeholders, analysis of IT policy and procedure documents, and employee surveys to assess their perceptions of the effectiveness of IT governance. The assessment was carried out by comparing the implementation of COBIT 5 against the performance indicators and controls set out in the framework. This study revealed that although COBIT 5 provides a comprehensive framework for IT governance, the success of its implementation is highly dependent on managerial support, adequate training, and adjustments to the specific needs of the organization. Recommendations for improving effectiveness include strengthening training, improving internal communication, and periodic evaluation of COBIT 5 implementation. The implementation of COBIT 5 has shown substantial benefits in improving IT governance and supporting the achievement of organizational goals. However, to maximize its effectiveness, attention is needed to the aspects that influence the adoption and implementation of this framework.

Enhancing Digital Transformation: A Comprehensive Review of PT Hutama Karya's Information Technology Management in 2023

This paper provides an in-depth analysis of PT Hutama Karya’s Information Technology (IT) Management Report for the year 2023. The study focuses on the company’s strategic initiatives and achievements in aligning IT functions with its business objectives, particularly in the context of Industry 4.0 readiness. Key areas examined include the evolution of IT architecture, implementation of IT governance frameworks, cybersecurity enhancements, ERP integration, and the development of supporting applications. The findings highlight the significant progress made in digital transformation and the proactive steps taken to ensure the company’s IT infrastructure supports its strategic goals.

Implementation of suitable information technology governance frameworks for Moroccan higher education institutions

This article aims to present formal governance practices of information technology adapted to the general context of Moroccan universities. The study consists of two main phases: the conceptualization phase and the operationalization phase. During the conceptualization phase, the authors reviewed relevant literature on best practices and their associated frameworks in higher education institutions (HEIs). The results revealed that universities had varying levels of maturity in terms of good practices and often used multiple information system frameworks, which can cause organizational and technical problems. In order to find a solution to this situation, the authors conducted in-depth interviews with chief information officers (CIOs) and university officials from four Moroccan universities during the operationalization phase. These interviews enabled them to propose an effective baseline of best practices and an algorithmic approach to assist managers in choosing between two combinations of frameworks that cover all the mechanisms of the baseline. This solution would enable optimal, agile, and easy-to-implement information technology governance in Moroccan universities while avoiding the multiplicity of frameworks.

THEORETICAL FRAMEWORKS SUPPORTING IT AND BUSINESS STRATEGY ALIGNMENT FOR SUSTAINED COMPETITIVE ADVANTAGE

In today's dynamic business environment, the alignment between information technology (IT) and business strategy is critical for organizations seeking sustained competitive advantage. This paper presents a comprehensive examination of theoretical frameworks supporting this alignment, aiming to provide insights into how organizations can effectively integrate IT capabilities with strategic objectives. The theoretical foundations explored include the Resource-Based View (RBV), which emphasizes leveraging unique resources and capabilities to achieve competitive advantage. Additionally, the Dynamic Capabilities Framework underscores the importance of an organization's ability to adapt and innovate in response to changing market conditions, highlighting the role of IT in facilitating agility and flexibility. The Strategic Alignment Model offers a structured approach to ensuring coherence between business strategy, IT strategy, and organizational infrastructure, enabling seamless integration and alignment. Value Chain Analysis provides a framework for understanding how IT can add value across different stages of the value chain, informing strategic decision-making and resource allocation. Moreover, IT Governance Frameworks, such as COBIT and ITIL, offer guidelines for effective management and governance of IT resources to support strategic objectives. Business Process Reengineering (BPR) is also examined as a methodology for redesigning business processes to align with strategic goals and leverage IT capabilities. Through an exploration of these theoretical frameworks, this paper aims to equip organizations with the knowledge and tools necessary to achieve sustained competitive advantage through the strategic alignment of IT and business strategies. Keywords: Theoretical Frameworks, IT, Business Strategy Alignment, Sustained Competitive Advantage.

Enhancing Financial Technology Operations: A Comprehensive Evaluation Using COBIT 2019 Framework

This research aims to enhance information technology (IT) governance in a financial technology company by focusing on peer-to-peer lending services. The main challenges faced by the company involve a lack of system design details, leading to post-implementation imperfections and negative impacts on business process performance, including unnecessary delays and adjustments. The lack of transparency in system evaluation is also a hindrance caused by incomplete recording of test results. Therefore, this research aims to address these challenges by utilizing the COBIT 2019 framework. The study employs a qualitative approach, utilizing data obtained through interviews and literature studies supported by the COBIT Tool Kit. The analysis is conducted on three main objectives: security management, solution identification, and IT change management, to identify disparities between the current status and desired targets. The analysis results highlight the need for improvements in specific aspects, including the lack of system design details, more precise information in the change process, and deficiencies in recording test results. Recommendations for improvement involve the development of more detailed guidelines for system design, enhanced documentation of changes, and improvements in testing instructions and result reporting. Additionally, recommendations focus on enhancing capabilities through proactive evaluation, refining security plans, developing more adaptive solution acquisition strategies, and improving testing practices. Thus, this research underscores the importance of strategic improvements within the IT and Information Systems governance framework to shape a more effective and transparent operational environment in Financial Technology companies.

A Systematic Literature Review on IT Governance Mechanisms and Frameworks

Nowadays, it is not common to come across sectors that can work and succeed without using information technology (IT). IT has now become a part of organizations' management and strategic decision-making mechanisms. Therefore, organizations make serious investments to develop software and system infrastructures and transfer business processes to digital environments such as cloud technologies. So, they get business resilient while they gain opportunities of spreading their business activities to wide stakeholders and customers. Here it is essential to provide assurance that an organization evaluates, develops, implements, maintains, disposes of its IT systems and manages life cycle of all information and information technology systems properly on all physical and logical environments. However, the most important matter is that an organization’s objectives are met by the management practices of its information systems. While organizations carry out their digital transformation at a dizzying speed, organizations should be protected from material and moral damages such as loss of money, loss of commercial confidential information, loss of reputation by protecting the confidentiality, integrity and accessibility of the information assets they own and also comply with legal legislations such as the protection of personal data and intellectual property rights. In order to achieve this, organizations benefit from one or more frameworks, standards or directives that are suitable for their own structures and needs, separately or by integrating them. However, the most important point in this transformation process is the transition of organizations from IT management understanding to IT governance. In other words, IT has now become a part of the strategic decision-making mechanism by rising from the level of support tool to carry out business processes in organizations. When we search the academic literature, frameworks and standards, it is seen that the key elements of IT governance are structures, processes and relational mechanisms. If these three components are set up correctly and fit the organization, it can be assured that IT aligns with and supports the objectives of the organizations and that effective IT governance is achieved in every kind of organizations. In this research, databases such as Web of Science, IEEE, and SCOPUS are scanned and found articles are reviewed in order to make a literature review on IT Governance Mechanisms and Frameworks. Results are evaluated and discussed. By the way, suggestions for further studies were made and advanced researches were shed light on.

ASSESSING ORGANISATIONS’ READINESS TO ADOPT GREEN INFORMATION TECHNOLOGY: THE CASE OF A SOUTH AFRICAN INFORMATION TECHNOLOGY SERVICES VENDOR

Green information technology (IT) adoption is an important topic in the fields of information systems, business sustainability, and corporate social responsibility. This case study applies the green IT adoption model (GITAM) to perform a systematic and qualitative readiness assessment at a major South African IT services vendor. Thematic data analysis was used to analyse the data collected from managers and specialist IT staff. The assessment revealed that the main organisational adoption readiness barriers were the lack of a formal green IT policy, an unclearly defined green IT governance framework, and a lack of green performance management. The main drivers of adoption were economic imperatives and regulatory and ethical requirements. Interestingly, a contextual variable – an exogenous shock caused by COVID-19 and the robustness of the organisation’s crisis response during the pandemic – rapidly increased the rate of green IT adoption at the firm. Keywords: Corporate Social Responsibility, Green IT Adoption Model (GITAM), Case Study, G-readiness Assessment, Green IT, Sustainability, Technology Adoption

The interaction between rationality, politics and artificial intelligence in the decision-making process

This review paper delves deeply into the intricate correlation between rational and political strategies in the decision-making process of information technology governance (ITG). The core focus is to understand how advanced technologies like artificial intelligence (AI), machine learning, and decision intelligence, when juxtaposed with traditional political decision-making methods and rational conceptualization (Cohen & Comesaña, 2023), coalesce within the ITG framework. The authors posit that while ITG’s decision-making can be influenced by AI, rationality, or politics, there’s a discernible alignment of managerial actions leveraging big data and machine learning with rational models, rather than political ones. Furthermore, the paper touches upon the power dynamics and strategic decision-making processes that often underpin ITG decisions. This research not only deepens the theoretical understanding but also provides pragmatic recommendations, making it invaluable for informed resource management in business management and ITG (Filgueiras, 2023). Through this exploration, stakeholders can better navigate the complexities of ITG, ensuring that technology aligns with organizational goals and strategies. As this paper identifies the power dynamics and strategic decision-making processes that often underpin ITG decisions, we can state that there was a discernible alignment of managerial actions leveraging big data and machine learning with rational models, rather than political ones.

A Conceptual Framework for IT Governance Mechanisms in Uganda's Higher Institutions of Learning

Poor implementation of Information Technology Governance (ITG) leads to several IT systems performing poorly. Resulting to discontinuity of services, user frustration, loss of IT investment, increased redundancy, duplication of efforts, poor decision-making, and reputation loss. In Uganda, implementation of ITG is low as many public sector organizations are yet to streamline. Yet, for Higher Institutions of Learning (HILs), the implementation of ITG is unexplored. Therefore, this study sought to determine the required mechanisms to design an ITG framework for HILs in Uganda (IGHU). A descriptive field study was conducted and the data were analyzed using SmartPLS 2.3.9 software. The causal relationships and validity of the constructs of IGHU were tested using partial least square path modeling. The coefficient of determination was 0.35; the path coefficient indicated both positive and negative relationships of independent to dependent constructs, and hypotheses such as accountability of IT projects and awareness campaigns were statistically significant.

How IT Governance can assist IoT project implementation

Internet of things (IoT) is considered a key technology for the Industry 4.0 revolution. Information Technology (IT) governance (ITG) is now an increasingly important tool for organizations to align their IT strategy and infrastructures with the organizations’ business objectives. The most adopted ITG framework is COBIT, which defines seven enabler categories. These enablers aim to facilitate the implementation, identification, and management of IT. This research aims to determine, explore, and define which are the most suitable IT governance enablers to assist managers in IoT implementation. The study adopted the Design Science Research methodology, including two systematic literature reviews and a Delphi method to build the artefact. The artefact was demonstrated and evaluated in a real organization. The results indicate that data privacy, data protection, and data analysis are currently the most relevant enablers to consider in an IoT implementation because they increase the efficiency of the solution and enhance data credibility.

Aligning Information Technology and Supply Chain

Information technology (IT) has a critical importance. Information technology governance (ITG) is the system that allows enterprises to master the complexity of IT in order to maximize its use and to foster the competitive advantage. Control objectives for information and related technology (COBIT) is a well-known IT governance (ITG) framework that groups IT best practices. There is little research about the correlation between COBIT and domain specific frameworks, like supply chain operation reference (SCOR) for supply chain (SC). The paper proposes an approach to map SCOR's components to COBIT with ArchiMate, which is a standard language to model enterprise architecture (EA). The mapping can simplify, by visualization, the complexity of both frameworks. It can also provide a view on possible overlaps and synergies between SCOR and COBIT. Two detailed illustrations are presented. The evaluation is done according the Bunge-Wand-Weber method. An example of the utility of the mapping is done for a real case scenario.

Should we wear a velvet glove to enforce Information security policies in higher education?

ABSTRACT The United States higher education is facing a unique challenge in information security management due to its distinctive characteristics, such as decentralised structure, academic freedom, and shared governance. These characteristics sharply distinguish higher education from traditional corporations. Gradually, this is beginning to pose a challenge for higher education institutions to adopt the appropriate information technology governance framework, which, for traditional corporations, mostly addresses security governance and leadership in a top-down manner. To address this issue, we examine the effect of perceived information security management approaches on perceived security practices. Our results show that the perceived flexible-oriented approach of information security management is more effective to use in implementing security controls in high education institutions. This seems to contradict most of the findings in the literature that suggest that a control-oriented approach is more effective in enforcing information security policies. Research contributions and implications are discussed, accordingly.

The Internet, The Cloud, and Information Technology Governance

Information Technology Governance (ITG) has become a catalyst for strategic evaluation and deployment of IT solutions. Much of the concepts, the mechanisms, the processes, the frameworks, and the standards of ITG date back to the 1990s. A review of recent studies indicates an increased uptake of ITG practices within organizations – mostly via the adoption of ITG standards and frameworks. Within the last decade, we have witnessed rapid technological advancements which have in turn motivated radical changes in the management of IT infrastructure, deployment of IT applications, and delivery of IT services. For instance, Data Centers and Cloud Services have transformed the paradigm of infrastructure and application management in the IT sector. Moreover, sophisticated smart mobile solutions have made it possible to develop IoT solutions enabling smart cities and smart building initiatives. A review of timelines when ITG concepts and standards established suggest that they originated years before recent transformations in technology adoption took place. Some ITG standards show that the adoption of some cloud services motivated revision in some ITG frameworks. This study demonstrates that there is a possibility that some of the current ITG standards are not fine-tuned to reflect recent developments in the adoption of IT solutions and services.

Governing IT in HEIs: Systematic Mapping Review

Abstract Background Higher Education Institutions (HEIs) are aware of the immense importance of achieving their strategic objectives to increase their impact on the society and to be competitive. As a board responsibility, information technology governance (ITG) plays an important role in the overall HEIs performance. Numerous HEIs are making great efforts to properly govern information technology (IT) by using ITG frameworks. Objectives This study investigates the overall adoption of ITG frameworks in different HEIs through a systematic mapping review. Method We analyzed forty relevant papers, filtered from 6 selected online libraries, and answered six research questions on ITG implementations at universities worldwide. Results The results show an increasing number of publications on ITG usage in HEIs in the last decade. The largest number of applications is described in Asian countries, while the most popular used frameworks are COBIT, ISO versions, and in-house developed frameworks. Finally, we describe the top challenges and benefits of ITG implementation mentioned in research papers. Conclusion This paper provides a deep insight into the level of integration of ITG in universities worldwide. The results will be presented to the involved stakeholders at our university to increase the awareness of ITG in HEIs and help its implementation process.

An IT governance framework for IS portfolio management

PurposeSuccess in the information systems (IS) project domain is elusive despite extensive research on the topic. Governance is seen as the greatest contributor to project success. The purpose of this paper is to investigate and report on the current perceptions and implementation of information technology (IT) governance within IS portfolio management to develop a sub-framework to guide practitioners. This sub-framework forms part of a grand IS project, programme and portfolio governance framework of which this study forms a contributing part.Design/methodology/approachThe researchers followed a mixed-methods approach through utilising Q-methodology and inverted factor analysis.FindingsThe results provided a sub-framework recommending specific IT governance practices to be applied to IS portfolios. The recommendations are categorised as activities to be maintained, enhanced and/or implemented.Research limitations/implicationsThe research only had participants from South African organisations and as such cannot be reliably extrapolated to other regions.Originality/valueThe resultant sub-framework provides stakeholders and practitioners involved in IS portfolios an opportunity to examine their own approaches and be confronted with possibilities in their portfolio management activities. Further research to be conducted includes creating a grand framework to address the linkages between portfolio, programme and project management as it relates to IT governance on various strategic levels.

Information technology governance model for a low resource institution with fragmented IT portfolio

The emergence of information technology governance in higher education has emerged as important for aligning information technology goals with that of institutions in order to achieve the mission and vision of institutions. Even though higher education institutions in South Africa have some form of information technology governance or information technology strategic committee in place, they are still struggling to operationalize their mandate effectively in order to achieve their objectives. The struggle is even more in settings that are low on resources and where the information technology portfolio is highly fragmented. In this article, an information technology governance model suitable for low resource settings and fragmented information technology portfolios is proposed to assist institutions having this type of setting achieve successful strategic information technology alignment. Case study research was used to: 1) understand information technology challenges that an institution with this type of setting faces and; 2) understand how other similar institutions have implemented their information technolgy governance. The findings from the case studies contributed to the development of an effective information technology governance model suited to these institutions with low resource settings and having fragmented information technology portifolios. Initial evaluation of the model using existing literature review, existing information technology governance frameworks and case studies used in the study indicate the validity of the model.

IT Governance Enablers

The pace of information technology evolution calls for governance. Control Objectives for Information and Related Technologies (COBIT) is the main framework for information technology governance (ITG) and defines the concept of IT governance enablers as a critical step for any governance decision or path. This investigation aims to clarify the enablers defined by COBIT to help organizations manage their information technology. Clarity on the meaning of enabler is still lacking in the literature. Enablers are somewhat described in COBIT leaving space for confusion and contradictions among researchers and practitioners. The research question to be answered by this investigation concerns the definition for each enabler and how it is dictated by the COBIT framework. Further this study proposes a clarification concerning the definition of ITG enablers as addressed by COBIT and several filtration stages and criteria were used to select high-quality studies. Given the aim of this research, the authors adopted a systematic literature review (SLR) methodology to analyze and synthesize the knowledge about the enablers from COBIT from the literature. Our findings may be used by future researchers to better define the scope of their definitions of enablers, to help future studies regarding the relationship of enablers with any technology or field, and to help future investigations about IT governance and its scope within an organization.

Dynamic capabilities for firm performance under the information technology governance framework

PurposeThis paper aims to investigate the role of dynamic capabilities in the Information Technology (IT) Governance view framework and explores the relationship between three domains of IT governance (Strategy, Management and Operations) and firm performance.Design/methodology/approachIn this study, the authors used a mixed methods approach and using a survey instrument and its validation with interviews, to collect data from 134 successful European SMEs in the multi-country setting of Belgium, Bulgaria, Denmark, Spain and the UK.FindingsThe findings show that various IT governance mechanisms function as dynamic capabilities and are directly associated with firm performance. The impact of each mechanism is different.Originality/valueThis study highlights the relationship between IT governance acumens and organisational performance. It contributes to the field of IT Governance Framework in management, and the results may be generalisable to wider economies and different organisation types.