IT Governance Research Articles

From Software Management to Software Ecosystem Governance: A Bibliographic Review on Software Governance Practices Within Organizations and Their Evolution

Objective: The objective of this study is to map the publications that deal with IT Governance and the main aspects of Software development, acquisition and maintenance, identifying when the concepts related to software governance emerged and the main search sources for publications on the subject, highlighting the central issues of each of the emerging contexts. Theoretical Framework: A theoretical framework was used on the organizational structure of IT governance areas, focused on directing, analyzing and monitoring software development, differentiating the typical management activities designed by Juiz and Colomo-Palacios (2020). Method: The methodology adopted for this research comprises a qualitative-quantitative approach, using bibliometrics, bibliographic analysis and the application of a fractional authorship algorithm to identify the main authors to publish on the topic. Data collection was done using a set of search databases such as the Web of Science database and the Scopus database. Results and Discussion: The results obtained revealed the main authors identified in each of the databases searched, as well as the central themes of the searched themes, indicating the first appearance of each term and its main article. It is also possible to analyze the academic production related to each of these themes. Research Implications: The practical and theoretical implications of this research indicate fields of research that have become popular, bringing perspectives for future work, as well as fields that are being poorly explored in software development governance and management. Originality/Value: This study contributes to the area of ​​Information Technology management as the main themes studied in governance and management of software development formalize essential concepts for these fields of research and promote process improvement.

Information Technology Governance Using the COBIT 2019 Framework at PT Bank Pembangunan Daerah Papua

Effective and efficient information technology (IT) management is crucial for the banking industry, especially for PT Bank Pembangunan Daerah Papua (BPDP), which seeks to reinforce its role within the Papua region. Leveraging the COBIT 2019 framework, BPDP aims to enhance IT governance, addressing operational efficiency, information security, and regulatory compliance. This study highlights BPDP's strategic priorities, such as revenue growth, fostering innovation, and customer service excellence, which are essential for sustaining competitive advantage amidst regional geopolitical challenges. By identifying these key priorities, the research uncovers critical areas of improvement, including IT investment optimization, mitigation of regulatory and security risks, and solidifying IT's strategic role in driving business growth. To evaluate BPDP's IT governance maturity, this study applies COBIT 2019's ten design factors, from enterprise goals and risk profiles to IT-related issues, compliance needs, and technology adoption strategies. The findings underscore gaps in risk management, project lifecycle oversight, and resource allocation, offering actionable insights for governance improvement. Enhanced IT integration can support BPDP's larger objectives of sustainable growth and economic development within the region. Furthermore, the study demonstrates that a well-structured governance framework strengthens BPDP's operational efficiency, builds customer trust, and ensures alignment with regulatory standards and evolving technology landscapes. By adopting these governance recommendations, BPDP can achieve long-term success and secure its position as a prominent financial institution in Papua, thus reinforcing its commitment to regional economic growth and compliance with national regulatory standards.

Analysis of Information Technology Governance in the Transportation Agency using the Cobit 4.1 Framework

Information technology plays a role in supporting the goals of companies and government agencies by providing a fast, easy and accurate information and communication platform, increasing the effectiveness and efficiency of the planning process, and supporting innovation in companies and government agencies to develop. The existence of Information Technology has experienced development and the relationship between its operational roles in running an organization, where it is not only as a support for operations. Research was conducted at the Transportation Agency which concluded that the old system used was ineffective because the process carried out took time and space, making employee performance less efficient. After searching for data at the Transportation Agency by collecting data, it can be concluded that the information system used is still not optimal. Therefore, a system design was carried out. The results of the analysis were applied to a cobit system application program. After the research was conducted, the results of the calculation of the maturity model level obtained an average index of 3.16 ( Level 3). This means that the system. The new information system designed is expected to improve the quality of information and performance in the future

Information and Technology Governance Capability Analysis Using COBIT 2019: Case Study of CV Wirelessindo

The implementation of IT supports company sustainability. Large companies use IT as an integral part of their business model. Digital strategies must align with business strategies to achieve sustainability. Wirelessindo, established in 2007, provides IT solutions such as equipment, site surveys, network design and security, and tower installations. Its mission is to increase company productivity to win the competition in the era of Industry 4.0. IT is used to enhance customer service and internal business process efficiency. Initial investigations found issues with IT function mismatches, financial losses due to data loss, errors in IT equipment installation and configuration, and business process incidents caused by emerging risks. Identified root problems include employee knowledge gaps, risk management disparities, errors in defining business needs, and change management gaps. Based on these findings, IT governance evaluation was chosen as the research focus. This study aims to provide an overview of CV Wirelessindo IT capability levels and recommendations for improvements to meet expected levels. COBIT 2019 were used in this study. The General Manager, IT Division Manager, Software Development Team, Network Monitoring Team, Project Manager, and HR Manager were selected as respondents based on the Responsible, Accountable, Checked, Informed chart guidelines. Of the nine selected objectives, BAI08 showed level 0. APO12, BAI02, BAI06, BAI07, and DSS01 showed level 1. APO07, BAI10, and DSS03 showed capability level 2. Therefore, 61 recommendations were provided to raise the IT governance capability level to level 3 for all objectives.

Improving Productivity and Reducing Costs in an IT Service Provider: Applying the Lean Six Sigma Methodology

Objective: to present the use of the Six Sigma framework as a framework for IT Governance, in a multinational company that operates in the market of IT outsourcing services, with a view to assisting in the improvement of productivity, in its consequent significant reduction of costs and a better operational performance in the processes of the company providing outsourced IT services. Theoretical Framework: The study addresses concepts of the Lean philosophy, as well as the Six Sigma framework and the marriage of Lean and Six Sigma as a way to obtain advantages from the application of its methods, meeting the needs of the organization. Method: In this study, quantitative and qualitative methods were used from a descriptive research. A literature review and associated issues were carried out and a case study was applied from the results obtained through a project in a large multinational company that provides IT outsourcing services. Outcome and Discussion: The combination of Six Sigma with the business process offered the company an opportunity for cost reduction and improved its competitive advantage in an increasingly competitive and quality-driven market. Regarding the implementation of the incident governance process, a reduction of 24% was obtained; Regarding actions to reduce the number of overtime, a reduction of 40% was obtained. A total monthly reduction of US$ 5,589 was obtained and annually the reduction amount plus benefits reached US$ 67,068. Research Implications: Research contributes to the improvement of quality and significant cost reduction with the application of the Six Sigma framework, properly tested and demonstrated in an organization. Originality/Value: This study contributes to the literature by using the Six Sigma framework as a framework for IT Governance in order to help improve productivity with consequent significant cost reduction and better operational performance in the processes of an outsourced IT service provider. The relevance and value of this research are evidenced by the demonstration of the benefits obtained in the environment of the company under analysis.

Empathising and Defining the Strategy Development Process Adoption of Industrial 4.0 in SMEs

The advent of Industry 4.0 has become an integral part of the manufacturing industry, playing a crucialrole in boosting competitiveness and enhancing productivity within companies. Small and MediumEnterprises (SMEs), which contribute significantly to the national economy, must inevitably embracethe adoption of Industry 4.0 technology. However, the implementation of this technology at the SMEfaces numerous obstacles. To address these challenges and facilitate the transformation to Industry4.0 in SMEs, this research aims to construct a comprehensive adoption strategy. Currently in itspreliminary stage, the strategy development process primarily involves identifying stakeholders, theirneeds, and the goals they aim to achieve. Design thinking, specifically the empathize and define phase,is employed as the methodological approach. The information utilized in this study originates fromsystematic literature reviews conducted using PRISMA. The analysis of the gathered data hasidentified several stakeholders, including government entities, IT experts, management personnel, andemployees. However, for the purpose of creating user personas, the focus is narrowed down tomanagement and employees. User personas are instrumental in understanding the goals and potentialobstacles faced by these individuals. The culmination of this stage is the formulation of a problemstatement, which will be further refined in subsequent phases of the design thinking process.

Measuring IT Governance in ERP Systems: a COBIT 2019 Evaluation of SAP Material Management Module

Information technology systems such as Enterprise Resource Planning (ERP) are crucial for companies to meet their business needs. However, as companies grow, challenges arise, particularly in the Material Management (MM) module within SAP. This study aims to identify issues such as data inaccuracies and material duplication during the interfacing process with SAP MM and assess IT governance capabilities using the COBIT 2019 framework. The methods used include interviews and literature review, focusing on the domains of APO12 (Managed Risk), BAI03 (Managed Solutions Identification & Build), and DSS03 (Managed Problems). The results show that APO12 reached capability level 4, while BAI03 and DSS03 are at level 3, with a target of level 4. Recommendations include enhancing proactive system design evaluation, developing systematic procedures to address data issues, and implementing permanent solutions to prevent data duplication and inaccuracies during interfacing.

EVALUATION IT GOVERNANCE COMPUTER NETWORK AT CENTRAL BUREAU OF STATISTICS (BPS) MALUKU PROVINCE USING COBIT 2019 DSS01 AND DSS05 DOMAINS

This research aims to evaluate IT governance on the capability maturity level of computer networks at BPS Maluku Province using the COBIT 2019 Framework focusing on the DSS domain, namely DSS01 and DSS05. The research method uses qualitative and quantitative approaches by observing research objects, conducting interviews, and collecting data using a questionnaire distributed to the Maluku Province BPS office environment using saturation sampling techniques. The stages of this research were adapted to the COBIT 2019 framework. This research was measured using a Likert scale and utilized script apps, Google Cloud Platform, which was integrated with a web-based programming language. The results of this research show that the maturity level or capability maturity level in the DSS domain, namely the DSS01 subdomain, is 3.48 with a percentage of 69.70%. DSS05 is 3.47, with a rate of 69.47%. These two subdomains are still in the established process, level 3 with a GAP value of 2 for capability maturity level and the DSS01 domain GAP percentage of 30.30%. The DSS05 percentage is 30.53%, with a primarily achieved scale. Hopefully, this research will become a reference for improvements to several aspects that have been assessed and recommended so that computer network governance for services and activities at BPS Maluku Province becomes better.

The impact of audit on IT governance: A study of the financial services sector in Ghana

AbstractIn recent years, IT governance has been a subject of discussion among academics and practitioners. The concern has been on the need to implement governance mechanisms and ensure the right balance of these mechanisms. However, the audit of IT governance mechanisms has received very little attention. This paper aims to analyse the overall impact of IT governance audits on the maturity and coherence of governance mechanisms. Guided by the configurational theory, the researchers argue that when governance mechanisms operate coherently and are regularly audited, there will be improvement in IT governance and the performance of financial institutions. In this study, seven financial services companies in Ghana were reviewed, and their IT governance maturity was assessed after seven months of auditing with a COBIT 5‐driven IT audit framework. Two surveys were conducted, one before and one after the auditing. The findings of the study confirm the claim that regular auditing improves IT governance maturity and coherence. Several governance mechanisms within the case organizations improved to one higher level of maturity on the Capability Maturity Model. This improvement was after seven months of auditing. Regular auditing also improved IT roles and responsibilities, empowered IT personnel and improved the IT budgetary control and architecture of the entities. This study has implications for practice. It emphasizes the importance of independent regular IT auditing and the need to ensure coherence among IT governance mechanisms if effective IT governance is to be achieved in financial institutions.

Legal Perspective on Consumer Personal Data Protection in Fintech Services

The development of science and technology has significantly affected the financial transaction system in Indonesia, especially with the emergence of the Fintech business model. The rapid growth of Fintech indicates the need for smart management in order to provide optimal benefits to society. However, the potential misuse of consumers' personal data poses a risk that needs to be considered. This research uses a normative juridical and analytical descriptive approach to understand the legal dynamics in the Fintech industry and legal measures aimed at Safeguarding user data security in Indonesia, in accordance with the provisions of Financial Services Authority Regulation Number 13/Pojk.02/2018. The results show that Fintech business organizers and users have a relationship that is regulated through an electronic agreement. The legal safeguarding of personal data for Fintech user is governed by Financial Services Authority Regulation Number 1/Pojk.07/2013 and other pertinent regulations, addressing aspects such as confidentiality, data security, and the governance and risk management of information technology.

Modeling inter-organizational business process governance in the age of collaborative networks

Collaborative networks require inter-organizational business process governance (IO-BPG) mechanisms to define ownership over shared resources and activities, accountability over operations, inter-organizational roles and responsibilities, and strategic partner alignment. We developed an IO-BPG modeling approach aiming to incorporate (1) IT governance activities (e.g., IT performance measurement), (2) data governance activities (e.g., data strategy management), and (3) “shadow” parallel governance-related operations. Resulting from a design science research project, our contributions include the building blocks (domain attributes, ontology, and requirements) of a novel BPMN extension, its demonstration in logistics operations, its evaluation, and design principles to guide IO-BPG modeling. Suggestions for the development and evaluation of future BPMN extensions are also highlighted based on the lessons learned in this project. For practitioners, our contribution can improve accountability reports over data assets and operations, identify dataset ownership, assist in the coordination of governance activities in networked businesses, and comply with regulations and strategic partnership agreements.

E-Presence Application Increases the Level of Health Personnel Discipline to Improve the Quality of Health Services in Hospitals (Systematic Review Paper)

ABSTRACT In the era of increasingly advanced digital technology development, the government in Indonesia uses the E-presence digital attendance application to make attendance easier for its health workers. The use of e-presence is a form of progress in information technology in government. It is necessary to research changes in the level of discipline of health workers in implementing E-presence so that it can improve the quality of service or even reduce the quality of service. Find out how the use of E-presence among health workers can improve work discipline and improve service quality. The research design in this article uses descriptive qualitative research with data originating from the results of systematic reviews from various relevant national journal sources. Articles were obtained from Google Scholar and PubMed with identification in 2023 via Google Scholar n=205 and PubMed n=80. National and International Articles. With the keywords "Digital E-Presence", "Discipline Level", "Service Quality", "Attendance", "Android", "QR Code", and "Discipline". Penelusuran artikel penelitian di tahun 2023 menggunakan kata kunci pada database (n=285). Dilakukan skrining berdasarkan kriteria inklusi dan ekslusi, dan menghasilkan 9 artikel penelitian yang layak sesuai dengan kriteria. This research has changed the motivation of health workers where the level of discipline of health workers has increased and their orientation towards achievement has also improved. The use of e-presence has the impact of increasing the quality of service in hospitals because health workers are present to serve patients on time. Keywords: Health Personnel, The Quality Of Health, Services In Hospitals

A Review of IT Investment in Firms: What Can We Do in the New Era

Many studies on IT investment in companies have been conducted in the past, but our team combined them by summarizing the latest research. Compared to previous work, we revise a larger universe of firm IT investment, focus on more recent IT investment researches, refine the focus of current researchers pay attention to and address the problem of insufficient reference for enterprise practice. Through a review of the literature to synthesize the understanding of IT investment to (i) IT investment performance, (ii) IT adoption decision, (iii) IT governance, and (iv) IT labor (worker), we could highlight the research gaps that we encountered. Finally, based on the current research conclusions, we give practical suggestions from the early, middle and late stages of IT investment. This study contributes to the growing amount of literature on IT investment, both academically and practically.

Teachers' Perspectives on the Webex Online Platform for Secondary Education During the COVID-19 Pandemic in Greece

In this study, we examine the impact of Information Systems (IS) on the COVID-19 pandemic, focusing on the utilisation of the "Webex" online platform within the Greek educational system. This assessment aims to evaluate the platform's impact on organisational performance within this industry, particularly focusing on teachers' perspectives. This paper presents original quantitative research exploring how technological advancements have facilitated distance learning driven by the COVID-19 pandemic. The research is important because it highlights the challenges faced by Greece, as shown by the Digital Economy and Society Index (DESI) indicators (1). In 2019, Greece ranked 26th out of 28 Member States, indicating outdated infrastructure and a lack of training among educators. Additionally, the country experienced a "brain drain" as a result of the 2008 Greek financial crisis, leading to skilled educators leaving the country (2). The adoption of distance learning at the secondary education level in Greece presents unique challenges as well as opportunities, according to the research. The novelty of this study is its focus on primary data gathered from secondary school teachers in relation to the country’s technological and other challenges. It provides insights into the real-world application and effectiveness of the Webex platform in an unprecedented situation. The study contributes to new knowledge by providing a detailed understanding of teachers' IT competency, their perceptions of online education, and the state's support (or lack thereof). It also highlights the psychological benefits of online education for students despite the noted challenges in attendance and achieving educational objectives. However, these lessons were not consistent for all students. Based on the statistical analysis, factors such as attendance, challenges perceived by the students, and the achievement of educational objectives were determined to be indicators of the effectiveness of online instructors. Practically, this research highlights the necessity for improved training for teachers to effectively utilise online platforms. It also recommends enhancing IT infrastructure and government support to improve online education. Teachers expressed openness to training seminars and recognised the psychological gains for students, suggesting the potential for continued use of online teaching methods post-pandemic. The wider sociopolitical impact involves informing discussions on the necessity, value, and effectiveness of e-learning, thus guiding future educational policies and practices.

EVALUATION OF IT GOVERNANCE USING COBIT 2019 ON REGIONAL ASSET MANAGEMENT AGENCY OF DKI JAKARTA

An adequate level of IT availability can obtained by implementing IT Governance, which pay attention to all related issues service readiness, including services and resources. This research aimed to assess the IT Governance capability at the Regional Asset Management Agency (BPAD), a government institution responsible for asset management. The study specifically focused on issues related to data and information management, including leadership and risk management challenges. Using the COBIT 2019 Framework, data were collected through interviews and observations. The respondent of this research are 4 who work in the Data and Information Sub-Sector and one Head of Asset Administration. The findings revealed that the EDM 05 process achieved a capability level of 4, surpassing the organization's target. However, the APO 08 and APO 12 processes were rated at level 2, highlighting areas in need of improvement. The study provides recommendations to enhance BPAD's performance and optimize its business activities.

DESIGNING A MICROSERVICES BASED ENTERPRISE ARCHITECTURE USING TOGAF 10: A CASE STUDY APPROACH

PT Umbara Karya Sejati, operating in the home living and industrial product sectors, faced significant digital transformation challenges, marked by inefficiencies due to system integration issues and vendor dependencies that incurred cost penalties of 10-15% each month. Addressing these challenges, this research developed an Enterprise Architecture using TOGAF 10's Microservices Architecture (MSA) from the Preliminary Phase to Phase F: Migration Planning. This approach aimed to enhance system integration and operational efficiency, thereby improving modularity and scalability while reducing reliance on external vendors. A pivotal component of this architecture, an API gateway, provided robust monitoring capabilities for integration processes, enabling quick identification and prioritization of critical issues, which will assist the internal IT team's workflow. Furthermore, the research planned the establishment of a DevOps team, incorporating Agile methodologies, and scheduled IT governance and data security training to prepare for future policy development and strengthen internal controls. This strategic design equips the organization to navigate the volatility, uncertainty, complexity, and ambiguity (VUCA) of market demands with agile and effective responses, projecting a 10% increase in both operational and cost efficiency for PT Umbara Karya Sejati.

LEGAL ANALYSIS OF THE SHAREHOLDERS’ RIGHTS AND INFORMATION AND COMMUNICATION TECHNOLOGY IN NIGERIA

This study argues that deploying Information and Communication Technology (ICT) in corporate governance will strengthen the rights of shareholders and promote their effective participation in the affairs of the company in Nigeria. Nevertheless, the present corporate law on the right of shareholders in Nigeria are largely defective and inconsistent in creating enabling environment for shareholders to take the benefits of ICT in the exercise of their rights. For instance, section 240(2) of the Companies and Allied Matters Act (CAMA) 2020 promoted electronic meetings for private companies, but restricted public companies that would have needed electronic meetings the most. Besides, there are no rules for determining the specific electronic means that is suitable for the shareholders, thereby allowing company to provide electronic means that may be beyond the reach of the shareholders. Also, the Securities and Exchange Commission established e-dividend regime in 2015, but it is limited to companies listed on the Nigerian Stock Exchange. Therefore, this study analyzed comparative lessons from Canada and Europe, and recommended that the Nigeria’s Corporate Affairs Commission should, as a matter urgency, introduce standard guidelines for ICT and shareholders’ rights in Nigeria.

Readiness of big health data analytics by technology-organization-environment (TOE) framework in Ethiopian health sectors

BackgroundBig health data is a large and complex dataset that the health sector has collected and stored continuously to generate healthcare evidence for intervening the future healthcare uncertainty. However, data use for decision-making practices has been significantly low in developing countries, especially in Ethiopia. Hence, it is critical to ascertain which elements influence the health sector's decision to adopt big health data analytics in health sectors. The aim of this study was to identify the level of readiness for big health data analytics and its associated factors in healthcare sectors. MethodsA cross-sectional study design was conducted among 845 target employees using the structural equation modeling approach by using technological, organizational, and environmental (TOE) frameworks. The target population of the study was health sector managers, directors, team leaders, healthcare planning officers, ICT/IT managers, and health professionals. For data analysis, exploratory factor analysis using SPSS 20.0 and structural equation modeling using AMOS software were used. Result58.85 % of the study participants had big health data analytics readiness. Complexity (CX), Top management support (TMS), training (TR) and government law policies and legislation (GLAL) and government IT policies (GITP) had positive direct effect, compatibility (CT), and optimism (OP) had negative direct effect on BD readiness (BDR) ConclusionThe technological, organizational, and environmental factors significantly contributed to big health data readiness in the healthcare sector. The Complexity, compatibility, optimism, Top management support, training (TR) and government law and IT policies (GITP) had effect on big health data analytics readiness. Formulating efficient reform in healthcare sectors, especially for evidence-based decision-making and jointly working with stakeholders will be more relevant for effective implementation of big health data analytics in healthcare sectors.

Ingesting digital archives into long-term storage system through free open-source software in South Africa

Purpose In South Africa, public institutions face challenges in transitioning their digital records to trusted digital repositories due to a deficiency in skills, infrastructure and systems. Free and open-source software (FOSS) presents a viable solution for facilitating the transfer of digital archives for permanent preservation. Despite the existence of FOSS policy in South Africa, the public sector has yet to fully use it to engage in the development and implementation of products for records management and archive preservation using open-source software. This study aims to explore the ingestion of digital archives into an approved long-term storage system through FOSS in South Africa with the view of developing a framework. Design/methodology/approach The study adopted a qualitative research approach to collect data through interviews with purposively selected participants (records managers, archivists and IT officials) from national government departments that have implemented records management systems for digital curation of archives, as well as the National Archives and Records Services of South Africa (NARSSA), which regulates archives and records management, and the State Information Technology Agency, which regulates information technology in government. Findings The findings of the study suggest that the systematic transfer of digital materials from public entities to NARSSA, as required by statute, has not taken place. Research limitations/implications The study specifically targeted national government departments that have implemented digital archives and records management systems. Consequently, perspectives from departments that have not implemented these solutions were excluded. Originality/value A framework is proposed for the transfer of digital archives, using interoperable FOSS, from government agencies responsible for records management to NARSSA for archival preservation. This framework, it is hoped, will facilitate infrastructure and skills development in the management of records and preservation of archives through open platforms.

Information Technology Governance Between Iso 38500, Risk It and Val It in Private University

This study explores the application of the ISO 38500, Risk IT, and Val IT frameworks in improving IT governance at the university. ISO 38500 provides general guidance for IT management by boards of directors, while Risk IT focuses on IT risk management and Val IT focuses on managing the value of IT investments. Qualitative research methods were used, including interviews with key stakeholders at Pamulang University. The research results show that the integration of the ISO 38500, Risk IT, and Val IT frameworks has helped universities optimize strategic decision-making regarding IT. Implementation of this framework increases transparency, accountability and holistic IT risk management across the university. However, challenges faced include a lack of deep understanding of the framework and the need to ensure consistency in implementation. Recommendations for the university include more intensive training for staff, strengthening communication between different units, and developing performance metrics that align with the university's strategic goals. This research makes an important contribution to the practical understanding of implementing effective IT governance in higher education environments, by highlighting the benefits and challenges of integrating the ISO 38500, Risk IT, and Val IT frameworks.