IT Governance Research Articles

A review of empirical studies on IT governance frameworks

A review of empirical studies on IT governance frameworks

Digitalization of Global Economy: A Qualitative Study Exploring Key Indicators use to Measure Digital Progress in the Public Sector

Research background:The digitalization of the global economy is the most common phenomenon in the 21st century. Most Public sector organizations have already started their journeys towards digitalization, and many of them have dealt with their contemporary challenges with success. At the center of these transformations are metrics and indicators used for evaluating digital progress. Already existing measures focus on numerical measures of the presence of digital technology in the public sector (output measures), but do not evaluate the quality of the digitalized public sector (outcome measures).Purpose of the article: This paper attempts to evaluate metrics and indicators used for measuring the digital progress in the public sector.Methods:Three particular aspects of digitalization in the top five leading countries (Finland, Sweden, Denmark, Netherlands, and Malta) were examined: I. success rate of public sector IT projects (measured by how often projects are scrapped); II. The price comparability between the public sector and private sector IT projects; and III. The relative modernity of government IT systems (compared to private sector systems).Findings & Value added:The findings of this paper present key metrics and indicators that can be used to evaluate public sector digital progress. Policymakers will need to redefine digitalization goals and areas of investments, while researchers can contribute more insights to the individual impact of these metrics and indicators on the development of a digital public sector. To this end, the paper contributes to a better understanding of the essential metrics and indicators to measure digitalization progress in the public sector.

What Stands in the Way of Bigger Internet with Virtually Unlimited IP Address in Cameroon: A Study of IPv6 Stakeholders in Cameroon

The purpose of this case study paper was to identify factors that Internet Protocol stakeholders consider as standing in the way of the transition to bigger, more secure and faster internet with virtually unlimited Internet Protocol address in Cameroon and was completed in two phases. Descriptive method was followed and two study instruments were designed and implemented, namely focus group interviews and questionnaire interviews. Both instruments were validated and implemented on a sample of (6) experts for the interviews and (115) for the questionnaire. The focus group data were analyzed using a thematic analysis technique, leading to the identification of six themes including lack of policies and incentives to promote IPv6 deployment at government level, many organizations are seeing IPv6 as an issue that will only affect them in the distant future and not looking at IPv6 technology as an innovation generation opportunity. Decisions on these issues need to change if IPv6 current status in Cameroon is to change. The findings were then validated in the final phase. This involved the deployment of a survey questionnaire to collect opinions of 115 IPv6 actors working in both public and private institutions in Cameroon. The results revealed that IPv6 was not sufficiently attended to by organizations in Cameroon. The study results may be of practical use for Government IT decision makers. A further and more comprehensive research into the topic is recommended.

Analisis kesenjangan sistem manajemen keamanan informasi (SMKI) sebagai persiapan sertifikasi ISO/IEC 27001:2013 pada institusi pemerintah

The Madiun City Communication and Informatics Service (Diskominfo) is a government institution that has the responsibility for managing information and communication technology in the Madiun city government. As a government institution to serving and providing information to the public, Diskominfo Madiun City is vulnerable to information security threats that can hinder its performance. Information Security Management System ISO / IEC 2701: 2013 is a system that expected to be able to provide effectiveness and efficiency of information security management at Diskominfo Madiun city. This research aims to determine the current conditions and how the readiness of Diskominfo Madiun City to achieve ISO/IEC 27001:2013 certification. From the results of the gap analysis, it can be seen that the percentage of readiness of Diskominfo Madiun City is 71%, with a readiness range between 19% - 100%. The highest level of readiness is 100% on the requirements of clause 4 concerning the organizational context and clause 10 concerning improvements, where all information security requirements have been met. While the lowest readiness percentage is 19% which is shown in the requirements of clause 6 regarding planning. The gap analysis method is used to determine how far the ISO/IEC 27001:2013 requirements are fulfilled. The results of the gap analysis show the extent of the readiness of Diskominfo Madiun City to carry out ISO/IEC 27001:2013 certification. The results of the research indicate that Diskominfo Madiun City must improve its readiness for ISO/IEC 27001:2013 certification by fulfill the requirements of the required information security documents based on ISO/IEC 27001:2013 standards.

Studi On Big Data Analytics Framework in Smart City Context

The issue of global urbanization, which is a separate problem faced by the government, is the very rapid growth of population density in cities. To face this challenge, the government launched a smart city project by targeting sustainable economic growth and improving the quality of life. Information and Communication Technology governance is the key to realizing a smart city. However, each of these I.C.T. tools produce large amounts of data known as Big Data. Data processing with the Big Data approach is becoming a trend in information systems to provide better public services and provide references in the policy-making process. However, to obtain important information in the scope of big data, a Big Data Analytics process is needed, also known as Big Data Value Chain. Extracting knowledge from the related literature can identify the characteristics of the big data analytic framework for smart cities. This paper reviews several big data analytic frameworks applied to smart cities. This paper is to find the advantages and disadvantages of each framework so that it can be a direction for future research

Information technology governance: legitimation, theorization and field trends

Purposeinvestigate and analyze the aspects of legitimation, theorization and trends for the evolution of research in information technology governance (ITG) in Brazil, according to researchers familiar with the matter.Design/methodology/approachBy means of a qualitative and quantitative research of exploratory-descriptive approach, the Delphi method was applied using a questionnaire supported by content analysis.FindingsITG is an increasingly interdisciplinary research field, with significant help from other fields of knowledge, such as administration, computer science and engineering. The main means of ITG publication are periodicals (MISQ, JMIS, JISTEM RESI), scientific events (AMCIS, ECIS, HICSS, EnANPAD, CONTECSI) and researchers, such as Peter Weill and Edimara Mezzomo Luciano. Best practice models are the most significant theoretical frameworks, and the main trend of research are on emerging technologies such as cloud computing and Internet of things (IoT) in the context of ITG.Research limitations/implicationsTo the unavailability of some researchers to participate in the second phase of the Delphi research performed, as well as the non-completion of a third Delphi round. Likewise, the “Block B (open answer questions)” it was not contemplated in the second phase for a new collection of answers, which could partially change the results presented here.Practical implicationsThe results show important insights for ITG researchers that can allow new researches about its applications, jointly reflecting on relevant aspects for the advancement of this research field.Social implicationsThere are several research contributions to broaden the discussion and the evolution of this new scientific field in Brazil and that can be grouped for each set of stakeholders: academia and related researchers; the practicing community of business managers and private and public organizations; the academic legitimizing bodies; the non-academic legitimating bodies and researchers from other areas of knowledge.Originality/valueITG is a concept that emerged as part of corporate governance (CG), which has evolved as an emerging theme and is expanding in the international academic arena. However, the current stage of legitimation, theorization and trends of ITG in the Brazilian researches are lacked greater understanding, in order to provide better targeting for new researches.

An Analysis of the Impact of Product Recall on Stock Prices based on Google Trend Search Counts

Purpose: Recall can have a critical impact on a company s image and reputation, and is one of the biggest issues for customers. In this study, we take the Event Study approach to analyze the impact of recall on corporate stock prices. In previous works, conflicting conclusions were drawn depending on the recall case and data collection process. Design/methodology/approach: To alleviate such issues, we utilize data as a more objective Google Trends. Specifically, we study the effects of product recall on stock prices from multiple aspects including (1) Google Trend search volume, (2) type of recall, (3) industry category, and (4) by country. Findings: Though we find that recall does not have a statistically significant effect on company share prices, we identified that recalls of companies with high search volume has a greater impact than those with low search volume. We also find that involuntary recalls have a greater impact than voluntary recalls, and non-automobile industries have a greater impact than the automobile industry. Research limitations/implications: The limitation of the research is that Google cannot accurately represent the world. It may not be fully reflected because there are countries that cannot use Google due to lack of IT infrastructure or government regulations. Also, it is not possible to know exactly when the information will leak when an event occurs. This is because if information had already leaked through people s oral traditions before it spread to the news, its influence would be reduced. Originality/value: For studies using traditional event studies, the choice of events was very likely to be chosen according to the choice of researchers. This study is significant in that it tried to solve this problem with Google Trends and investigated all the data mentioned on the Internet except for countries that could not access Google due to lack of government regulations or IT infrastructure.

IMPLEMENTING IT GOVERNANCE TO LEVERAGE IS/IT VALUE IN AN ORGANIZATION CASE STUDY MIS DEPARTMENT OF PT. XYZ

The objective In this research are to know what are the indicator of good performance, what are the CSF, KPI & KGI for ?, how do we measure and compare both of them? The Methodology used for this research is based on framework released by IT Governance Institute but it is being modified (minor changes) for a certain purpose. Based on our analysis the average IT Maturity level of fourteen IT process at MIS Department PT. XYZ is 2.83 more higher than the result from ISACA survey among 47 US company only 2.62. The IT management of PT. XYZ should not make their self satisfied with this result, as multinational company they have to aware for improving regarding their IT governance. Our research also provided & equipped set action plan & methodology for management to achieve the better IT Maturity Level. There are some recommendations for the IT management in order to achieve the better namely: 1. IT Maturity Level Management have to perform continuous improvement, especially for some IT process such as DS1 (Define Service Level) the lowest maturity rating, DS4 (Ensure Continuous Services) the second lowest maturity rating, PO9 (Assess Risk) & PO10 (Manage Project) the third lowest maturity rating. 2. Management also have to consider for doing the full step methodology in the next assessment. 3. Management have to consider for develop performance measurement tools, this tools will help management to manage IT resources & process for aligning with the business objective

PERANCANGAN TATA KELOLA TEKNOLOGI INFORMASI

Tujuan penelitian ini adalah (1) mengetahui kebutuhan tata kelola teknologi informasi (TI) di Kantor Wilayah Kementerian Agama Provinsi Sumatera Barat, (2) membuat tahapan rancangan tata kelola TI dengan kerangka kerja COBIT 4.1.Sehingga (3) menghasilkan rancangan dokumen tata kelola TI berisi kebijakan terkait kepemimpinan, struktur, dan proses-proses TI yang kritikal.Penelitian ini menggunakan metode pengembangan (Research and development) dengan standar/kerangka kerja (framework) COBIT 4.1 (Control Objectives for Information and Related Technology 4.1) dan perangkat pendukungnya.Metode analisis melalui wawancara semi terstruktur terhadap Pimpinan Kantor Wilayah Kementerian Agama Provinsi Sumatera Barat dan kajian dokumen yang terkait dengan implementasi TI.Hasil dari penelitian ini dalam bentuk dokumen tata kelola TI yang berisi kebijakan terkait dengan kepemimpinan, struktur, dan proses-proses TI yang kritikal di Kantor Wilayah Kementerian Agama Provinisi Sumatera Barat.

Tata Kelola Terhadap Layanan IT Di Kejaksaan Tinggi Kep. Babel Berdasarkan Perspektif Internal Pada Cobit 5

So far, the High Prosecutor's Office for Bangka Belitung Islands has not yet had a certain standard in evaluating service levels. In addition, there has never been an evaluation of governance at the service level at the High Court of Bangka Belitung Islands. In this study, the problem faced is the absence of a standardized governance system both in the management and procurement of IT equipment in each work unit, making it difficult to handle problems for each user. This is because basically services require certain effectiveness in terms of time and quality of services and optimize public service tasks in the legal field. In research using a framework to assess IT governance is Cobit 5. Where Cobit 5 can be the basis for assessment. Based on the results of the analysis using the Cobit 5 framework method using 4 domains, namely APO, EDM, BAI and MEA. The assessment uses the help of a maturity model scale, to see the current maturity level conditions. After obtaining the value of the maturity level, it will be seen in which part is needed to improve first. Thus, the results of this research provide priority domains for improvement. Keywords : IT Governance, COBIT 5, Technology Services

An INFORMATION TECHNOLOGY GOVERNANCE AUDIT PLANNING CALIBRATION LABORATORY USING COBIT 2019

As a calibration laboratory that has been accredited by the KAN Institute, BSML Regional II is obliged to implement a quality system. In response to the demands of information technology developments, KAN calls on calibration laboratory organizations to develop information technology and its management. Information technology governance audit, besides functioning to identify management mismatches, also functions to optimize performance so that the company's vision and mission can be achieved. COBIT 2019 as the latest edition of ISACA's framework makes improvements in terms of goal cascading using design factors so that planning / design audits will be more precise. This research produces a planning of information technology governance audit activities in the calibration laboratory, in this case BSML Regional II.

A Risk Perception Indicator to Evaluate the Migration of Government Legacy Systems to the Cloud

Cloud computing is a new platform that offers potential cost reduction and reduced infrastructure management effort. Organizations are migrating legacy systems to the cloud to take advantage of its benefits. In this work, the authors propose a risk perception indicator (RPI) to bring objectivity to the decision about which systems could be migrated and about their migration order. The main goal of this article is to validate the RPI in the government domain. Through a case study with three government legacy systems and an experimental analysis based on a survey with 248 IT government employees, the RPI was evaluated and adjusted. The adjustments were made based on survey's results and appear to improve its accuracy and representativeness. The results showed that the use of the reference model and the risk perception indicator is sound and important regarding government legacy systems migration to the cloud.

PERANCANGAN TATA KELOLA TEKNOLOGI INFORMASI MENGGUNAKAN FRAMEWORK COBIT 2019 PADA PT. XYZ

PT. XYZ is a company that serves fabrication and inspection services. PT. XYZ serves companies in Indonesia, both companies engaged in mining, palm oil processing factories, construction, and shipping. Information technology governance is needed to align the company's business objectives with its technology's performance. This research is encouraged by the absence of an assessment of information technology governance. This research intended to help the company knew the important processes in the company. This research uses the COBIT 2019 framework that is the latest version of COBIT released by ISACA. This company's analysis uses 11 design factors that are supported by a toolkit. The results are information technology governance values and their important processes. The results of this research are information technology governance design of the company and knew the important processes to PT. XYZ. These important processes include APO06 Managed budget and costs, APO09 Managed service agreements, APO12 Managed risk, BAI04 Managed availability and capacity, and BAI11 Managed projects with target capability levels 3 and 4.

The Effects of Business-IT Strategic Alignment and IT Governance on Firm Performance: A Moderated Polynomial Regression Analysis

Organizations use IT to navigate uncertain, rapidly changing, and competitive environments. To achieve this, understanding the implications of the interplay among firm strategy, information technology (IT), and IT governance is critical to understanding

Impact of Effective Information Technology Governance on Audit Technology Performance in Ghana

The notion of Industry 4.0 significantly changed the way firms’ operate and has influenced everyday life. The rapid digitalization and emergent trend of information technology (IT) transformation in firms and ample investment in IT by Ghanaian government stimulated the importance of IT-based risks and its associated controls. In addition, technology enabled the auditing and IT-related audit methods have significance when carrying out audit tasks. This study aims to investigate the effects of IT governess effectiveness on audit technology performance in the public sector of Ghana. This study used closed-ended to collect data. An online survey admitted to record 186 responses. The findings of the study stated that top management support, IT support services, and IT committee have a positive and statistically significant influence on audit technology performance. The proposed model of the study explained 65.1% variance in the audit technology performance. The study proposes that public sector companies must strengthen IT governance by developing an appropriate IT committee and IT support services for the auditors. Besides, firms should clearly elucidate their priorities and requirements associated with technology-based training in their IT policies, and action plans to improve the utilization of audit technology. Keywords: Information technology governance, audit technology performance, IT support services, IT committee, top management support. DOI: 10.7176/RJFA/11-24-05 Publication date: December 31 st 2020

Investigating top management preparedness for leading IT governance during the coronavirus crisis

This paper aims to examine the extent to which top management strategically thinks so that their organizations are completely ready to carry on being well-functioning in all business aspects during the periods of unpredictability or crisis We mainly focus on testing the impact of a set of mechanisms, representing some preparedness measures, on the ITG maturity of the surveyed organizations in Lebanon The empirical findings of the conducted survey reveal that the major enablers of effective ITG leadership under crisis are "Periodic communication of ITG mechanisms" and "Tested crisis communication plan" while five other factors have moderate influence and one factor has little influence

Internal Control as a Catalyst for Clean Audit Outcomes in the Local Government The Moderating Role of Information Technology

There is a pressing need for effective monitoring of internal control systems to ensure that municipalities improve and sustain audit outcomes. In this context, there is the need for the management of municipalities to monitor the performance and maintenance of the adequate systems of internal controls available. The objective of this study is to examine the moderating role of information technology (IT) system governance in internal control on the achievement of clean audit outcome. The paper applied a quantitative approach with the aid of simple regression analysis. Data analysis was conducted in two phases; the first phase without IT governance and the second phase introduced the IT governance. Results from the analysis showed that the first phase without the IT system governance was insignificantly related to clean audit outcome; but the second phase with the IT system governance showed a p-value of less than 0.01 which shows that the moderating role of IT governance improved the model to be significantly related to clean audit outcome. The practical implication is that the effectiveness of municipal internal control toward an improved audit outcome can be enhanced significantly if information technology system governance is installed and managed efficiently in local municipalities. Future researcher on municipal internal, provincial or national control should include the IT system governance in their research model.

Challenges of IT Governance in the Financial Sector: A Study from Saudi Arabia

The financial sector plays a significant role in the economics of all nations. The Saudi Arabian economy ranks amongst the top twenty in the world. Consequently, the financial sector occupies a critical position within Saudi Arabia. Contemporary digital technology has rendered the financial sector heavily dependent upon information technology (IT) as a means of enhancing and extending its operational scope. Hence, efficient governance is required to streamline and utilize information technology. Moreover, the pivotal importance of the financial sector requires that IT governance challenges have to be swiftly identified. However, there is a manifest absence of scholarship regarding IT governance issues not only in the widest sense, but also specifically in the context of the financial sectors. This research seeks to identify the inherent challenges associated with IT governance in Saudi Arabia's financial sector with a view to generalizing any findings and contributing to future research in this field.

Ambidextrous governance of IT-enabled services: A pragmatic approach

Organizations must continuously allocate and reallocate limited resources, including IT resources, to competing innovation and operational concerns. While the ambidexterity literature provides some guidance regarding resource allocation approaches, studies typically assume that such tensions can be balanced without taking contextual and trade-off issues into account. Further, many studies examine ambidexterity approaches individually without considering how different approaches may be combined. To address these shortcomings, we pragmatically examine how a U.S. health delivery organization responded to technological, regulatory, and demand changes over a 15-year period and the effects of its actions. To manage the consequential tensions between innovation and operation of its IT-enabled services, we retrospectively observe that the organization applied a portfolio of sequential, structural, and contextual ambidexterity approaches. As a contribution to the IT governance and health IT literatures, the study offers theoretical and practical knowledge on how organizations can pragmatically apply ambidexterity in highly dynamic contexts to mindfully orchestrate and coordinate between innovation and operation of their IT-enabled services.

Corporate fraud and relationships: a systematic literature review in the light of research onion

PurposeThis paper aims to investigate how the literature has been addressing the relationships between corporate fraud and executive behavior and corporate fraud and information technology (IT) controls.Design/methodology/approachA systematic literature review was performed following the planning phases proposed by Levy and Ellis (2006), illuminated by the research onion, developed by Saunders et al. (2007).FindingsThe main findings of the studies analyzed refer basically to models to assess the risk of fraud. These risks originate from the market, from the organization itself or from individuals and also from their relationship networks. Subsequently, the main risks identified by the authors were classified according to their origin, the main theories approached and the “solutions” for the risks presented by the authors as the product of their work.Research limitations/implicationsIt should be noted that this study is not free of limitations, of which two stand out: the full body of articles on the subject was certainly not evaluated. Although the search has been systematic and judicious both by the combination of keywords for the searches, as well as by the use of the main databases and also by the rigor in the description of the procedures and the analysis of the articles in the light of Research Onion was based on the authors’ knowledge that may have been limited in some respect.Practical implicationsAs a practical implication, there is the relationship of red flags and their classification by origin, as they can be very useful for planning the work of internal and external auditors.Social implicationsIt is considered that this work can be a starting point for scholars who are interested in the corporate fraud phenomenon, given that the data was collected and organized systematically.Originality/valueThe analysis of the articles in relation to Research Onion shed light on the main philosophical and methodological characteristics of the studies. Also, regarding the relationships between corporate fraud and IT controls, existing scientific research appears to be limited. Searches for the terms information technology and information systems were extended, as well as search strings tested with the terms data governance and IT governance without results. This fact demonstrates that there may be (as far as the results have reached) a vast area of research on corporate fraud in the field of systems knowledge and information technology.