IT Management Research Articles

Complicating the Innovative Model of a High-Tech IT Company

This paper examines the combined impact of significant modern trends on competitive processes in the IT industry. These trends include industry digitalization, the use of artificial intelligence tools in software engineering, and the concept of an IT company without physical offices and with fully virtualized production processes. The determination of the level of influence of these trends on the European information technology market is based on the author's research from 2020-2023. It is already obvious that the combination of these trends has a serious impact on the industry, but this impact continues to grow, which requires the management of IT companies to manage timely changes at the strategic level. The article offers an updated list of signs of an IT company achieving high-tech status, defines elements of a corporate strategy that allow using related advantages, and presents tactical steps for implementing timely changes. The article also presents a fundamental route for an IT company to achieve the status of a promising high-tech company with a global level of competitiveness.

Does intercultural communication competence, cultural sensitivity, and temporal flexibility related to employee engagement? Moderation of negative emotions with COVID-19

The present study investigated the intercultural interactions among Indian IT professionals who collaborated remotely with international teams in response to the significant shift prompted by the COVID-19 pandemic. Understanding these factors is crucial for fostering successful collaborations and sustaining high levels of employee engagement in an increasingly virtual workplace. Data were obtained from Indian IT sector employees who collaborated with international teams or clients during the pandemic and were working remotely from their homes while communicating with intercultural teams and clients. The study analyzed data from a sample of 305 employees using structural equation modeling. The results revealed significant positive associations between intercultural communication competence, cultural sensitivity, and temporal flexibility with employee engagement. The results suggest that negative emotions during the pandemic weakened the positive relationship between intercultural communicative competence and employee engagement. Navigating the difficulties of remote IT work during the pandemic necessitates prioritizing intercultural competencies and acknowledging the substantial association of negative emotions. Our findings offer practical recommendations for IT managers seeking to improve team dynamics and foster employee involvement in intercultural work settings with a rapidly changing work environment.

Corporate Governance, Internal Control, Risk Management of Cooperative Banks in the Philippines: Inputs to Bank Strategic Improvement Plan

This study evaluated the compliance of Philippine cooperative banks with the governance, internal control, and risk management standards established by the Bangko Sentral ng Pilipinas (BSP). A comprehensive assessment was conducted to examine corporate governance practices in terms of governance structure, board-level committees, and related party transactions; internal control mechanisms focusing on compliance frameworks, internal control frameworks, and internal audit functions; and risk management strategies and practices related to risk identification, risk assessment, and risk management evaluation. Furthermore, the study examined the relationship between corporate governance, internal control, and risk management, proposing a strategic improvement plan based on the findings. The findings revealed that cooperative banks generally adhere to BSP’s governance standards, demonstrating strong practices in governance structures, board-level committees, and related party transactions. Additionally, the banks maintain robust internal control frameworks and rigorous internal audit procedures. While risk management practices are generally effective, areas such as IT and social media risk management require further attention. A significant correlation was observed among corporate governance, internal control, and risk management practices, suggesting that improvements in one area can positively impact the others. Based on these findings, a strategic improvement plan is proposed to enhance the overall effectiveness of cooperative banks. The study recommends continuous improvement of governance structures, investment in advanced monitoring systems for internal controls, and prioritization of risk management improvements, particularly in IT and social media. Future research is suggested to explore the long-term impact of these recommendations on the sustainability and growth of cooperative banks in the evolving regulatory and technological landscape.

Exploring IT-driven supply chain capabilities and resilience: the roles of supply chain risk management and complexity

Purpose In an era where global supply chains are increasingly susceptible to disruptions, this study aims to unlock the potential of IT integration within the supply chain in enhancing supply chain resilience. It investigates how this integration, combined with IT-driven capabilities, acts as a cornerstone in strengthening supply chain resilience (SCRs). The research navigates through the intricate dynamics of supply chain management to chart a strategic pathway for managers, illuminating the investments necessary to cultivate a resilient supply chain. Design/methodology/approach Grounding their investigation within the theoretical lens of dynamic resource-based theory, the authors designed a conceptual model to investigate the relationship between IT integration and SCR. Through the survey responses from supply chain professionals, the authors applied partial least squares-based structural equation modelling (PLS-SEM) to unravel the complexities of building a resilient supply chain. Findings Their investigation reveals that IT-driven supply chain capabilities (SCCs) are not just beneficial but essential in bridging IT integration with SCR. These capabilities emerge as vital, fully mediating the relationship between IT integration and SCR. Moreover, the significance of robust supply chain risk management (SCRM) in harnessing these IT-driven capabilities to bolster resilience is undeniable, offering organisations a sustainable advantage during times of turbulence. Research limitations/implications The primary limitation of this study is that data collection occurred during the COVID-19 pandemic. Therefore, the results may not be representative of different circumstances or periods. This study uncovered several noteworthy findings. The authors found that SCCs fully mediate the relationship between Supply Chain Management IT Integration (SCMITI) and SCR. In addition, the authors found that SCRM positively moderates the relationship between SCMITI and SCCs. The authors observed that Supply Chain Structural Complexity (SCSC) has no significant moderating effect on the relationship between IT-driven SCCs and SCR. Practical implications The results of this study offer managers a clear path forward for investing in SCR. Businesses must invest in SCMITI and SCRM to boost their SCR through developing IT-driven SCCs to ensure consistent business continuity. SCMITI does not necessarily increase SCR resilience when it is done poorly and does not lead to SCCs effectively. In this regard, managers must rely on collective wisdom to determine which technologies and IT applications will best meet their business needs and their peers’ requirements in the supply chain. Originality/value This study sheds light on the mechanisms through which IT enhances SCR. It fills a critical knowledge gap, focusing on the synergy between IT integration, risk management and the cultivation of IT-driven capabilities to navigate supply chain disruptions.

Determinants of intention to adopt blockchain technology in oil & gas sector in Iraq

Blockchain technology is poised to significantly transform the corporate world, heralding a new era of innovation and efficiency. Over the past few years, its impact has been noted by leaders, academics, and government representatives around the globe this growing interest underscores businesses’ need to evolve and reconsider traditional operational models. To remain competitive, organizations must embrace this change. Before introducing such ground-breaking technology, it is crucial to assess the motivations of primary stakeholders concerning its implementation. This study looks into what influences the use of Blockchain technology in the oil and gas sector, primarily using a quantitative survey of Iraqi oil and gas companies. A questionnaire was distributed among 250 top-level managers, senior executives, project managers, and IT managers for analyzing the data, the study employs the Structural Equation Modelling-Partial Least Squares (SEM-PLS) technique, with Smart PLS for data processing. The findings suggest that the intention to utilise blockchain technology is influenced by one’s attitude towards it. Competitive pressure (environmental factors), functional benefit, and privacy/security (technological factors) significantly affect blockchain adoption intention. Nevertheless, there was no discernible correlation between regulatory backing and the desire to use Blockchain. Additionally, cost concern and perceived risk (organizational factors) two factors contribute negatively to the perception of blockchain technology. Besides the direct relationship, the findings revealed that attitude toward blockchain technology mediate the relationship between cost concern, perceived risk, and intention to adopt Blockchain. Built upon the Technology-Organization-Environment (TOE) model and the Theory of Reasoned Action, this research offers a comprehensive framework for investigating the intention to adopt blockchain technology. The results enhance both theoretical understanding and practical implementation by providing valuable insights into the emerging area of blockchain adoption intentions.

Unlocking knowledge transfer dynamics across borders: key drivers in international strategic alliances

Purpose In today’s swiftly evolving and intensely competitive business landscape, organisations increasingly recognise the significance of cross-border collaborative partnerships. International Strategic Alliances (ISAs) have emerged as effective platforms to foster innovation and gain a competitive advantage. Within the context of the hotel industry, which epitomises international operations, this study aims to investigate the pivotal role of knowledge transfer (KT) in the performance of ISAs. Design/methodology/approach The research framework draws on the influence of technological drivers (TD), organisational drivers (OD) and individual drivers (ID) on successful KT within ISAs. By analysing data from managers and owners of international hotel businesses using Confirmatory Factor Analysis (CFA), this study empirically examines the relationships between these drivers and KT dynamics. Findings Findings highlight the direct impact of these drivers on KT and subsequent alliance performance. However, among these drivers, factors related to TDs, such as Web 2.0, knowledge management systems and IT infrastructure, generally received the highest values. Originality/value This study contributes to international business and knowledge management and sheds light on the intricate interactions between the drivers of KT and ISAs. The insights derived from this study provide a foundation for enhancing strategic alliance practices in a global context. By embracing KT mechanisms, organisations can harness collaborative potential, drive innovation and achieve sustainable growth.

Implementation of AI Transportation Routing in Reverse Logistics to Reduce CO2 Footprint

Purpose: This study explores the implementation of artificial intelligence (AI) in transportation routing within reverse logistics to reduce CO2 emissions. By optimizing routing processes, we aim to enhance the efficiency of logistics operations while minimizing environmental impact. Methodology: we analyze the implications of improved transportation strategies. Furthermore, we discuss the intersection of technological innovation and environmental economics in shaping sustainable practices. Findings: The findings underscore the importance of AI-driven decision-making frameworks (D81) and their role in advancing IT management in logistics. The study on AI-driven transportation routing in reverse logistics highlights significant implications for both businesses and the environment. By optimizing routes, AI reduces fuel consumption and CO₂ emissions, helping companies meet sustainability goals. This leads to cost savings, as AI improves route efficiency and fleet utilization, while also enhancing operational efficiency. AI’s ability to predict and adjust to real-time conditions ensures scalability and adaptability, making it easier to handle increasing returns volumes in e-commerce. Moreover, AI enables better inventory management and resource planning, reducing the need for urgent shipments. It also paves the way for innovations like autonomous vehicles, further transforming reverse logistics. Unique Contribution to Theory, Practice and Policy: The study shows how AI can help businesses comply with environmental regulations, providing a competitive edge. Ultimately, AI integration in reverse logistics contributes to both operational improvements and environmental sustainability, reinforcing corporate social responsibility.

Patient Health Record Protection Beyond the Health Insurance Portability and Accountability Act: Mixed Methods Study.

The security and privacy of health care information are crucial for maintaining the societal value of health care as a public good. However, governance over electronic health care data has proven inefficient, despite robust enforcement efforts. Both federal (HIPAA [Health Insurance Portability and Accountability Act]) and state regulations, along with the ombudsman rule, have not effectively reduced the frequency or impact of data breaches in the US health care system. While legal frameworks have bolstered data security, recent years have seen a concerning increase in breach incidents. This paper investigates common breach types and proposes best practices derived from the data as potential solutions. The primary aim of this study is to analyze health care and hospital breach data, comparing it against HIPAA compliance levels across states (spatial analysis) and the impact of the Omnibus Rule over time (temporal analysis). The goal is to establish guidelines for best practices in handling sensitive information within hospitals and clinical environments. The study used data from the Department of Health and Human Services on reported breaches, assessing the severity and impact of each breach type. We then analyzed secondary data to examine whether HIPAA's storage and retention rule amendments have influenced security and privacy incidents across all 50 states. Finally, we conducted a qualitative analysis of textual data from vulnerability and breach reports to identify actionable best practices for health care settings. Our findings indicate that hacking or IT incidents have the most significant impact on the number of individuals affected, highlighting this as a primary breach category. The overall difference-in-differences trend reveals no significant reduction in breach rates (P=.50), despite state-level regulations exceeding HIPAA requirements and the introduction of the ombudsman rule. This persistence in breach trends implies that even strengthened protections and additional guidelines have not effectively curbed the rising number of affected individuals. Through qualitative analysis, we identified 15 unique values and associated best practices from industry standards. Combining quantitative and qualitative insights, we propose the "SecureSphere framework" to enhance data security in health care institutions. This framework presents key security values structured in concentric circles: core values at the center and peripheral values around them. The core values include employee management, policy, procedures, and IT management. Peripheral values encompass the remaining security attributes that support these core elements. This structured approach provides a comprehensive security strategy for protecting patient health information and is designed to help health care organizations develop sustainable practices for data security.

Advancing Artificial Intelligence Adoption and Decision-making with Extended Technology Acceptance Model

Despite Kuala Lumpur’s push for AI integration, only 23% of businesses have adopted AI, lagging behind the global average of 37%, with 65% still relying on basic data tools and only 10% using advanced analytics. This study investigates the factors influencing AI adoption in Kuala Lumpur's IT sector, focusing on Perceived Ease of Use (PEOU), Perceived Usefulness (PU), and Perceived Organizational Support (POS). Using the Technology Acceptance Model (TAM) and Unified Theory of Acceptance and Use of Technology (UTAUT) as theoretical foundations, this study extends these frameworks by incorporating POS to emphasize the critical role of organizational support in AI adoption. Data from a survey of 340 IT managers were analyzed us- ing PLS-SEM. The results demonstrate that both PEOU and POS significantly impact PU, which in turn influences AI adoption intentions. POS emerged as a vital factor, indicating that organizational support, such as training and resource provision, is key in making AI useful and encouraging its adoption. This research has practical implications for businesses and policymakers. Organizations should focus on improving organizational support mechanisms, particularly through targeted training programs and technical assistance to enhance AI adoption. Policymakers are encouraged to refine initiatives like Industry4WRD by strengthening infrastructure and providing sector-specific support. The study's novelty lies in its focus on emerging markets like Kuala Lumpur, addressing a gap in AI adoption research by exploring the organizational challenges specific to such regions.

Understanding Penetration Testing for Evaluating Vulnerabilities and Enhancing Cyber Security

In response to the increasing incidence of cyber-attacks, organizations are prioritizing security testing for their software applications and products. Among the most effective methods for identifying vulnerabilities is penetration testing, which involves simulated attacks on systems to uncover weaknesses that could be exploited by malicious actors. This method not only aids in identifying and remediating security flaws but also evaluates a system's ability to withstand unexpected threats. This paper provides an in-depth exploration of penetration testing, detailing its stages, methodologies, and the role of web application firewalls. A penetration test systematically assesses the security of IT infrastructures by exploiting vulnerabilities in systems, applications, and user behaviours. The findings from these tests are essential for IT management, guiding strategic decisions and prioritizing remediation efforts. Ultimately, the primary aim of penetration testing is to evaluate the risk of a system breach and its potential impact on organizational resources and operations.

SolarWinds Attack: Stages, Implications, and Mitigation Strategies in the Cyber Age

SolarWinds is a software company based in the United States that provides IT monitoring and management tools. Founded in 1999, SolarWinds offers a variety of products that help organizations manage networks, systems, IT infrastructure, applications and cloud-based services. SolarWinds products are used for performance monitoring, log management, IT security, and data analysis. The company became widely known after a major cybersecurity incident came to light in late 2020, in which their network management software, Orion, was used as a vector for attacks by a state-backed hacking group. These attacks affected many organizations, including government agencies and private companies, and led to an increased focus on software supply chain security. This paper has reviewed stages, Implications, and mitigation strategies of SolarWinds.

An Overview of AI Applications in Cybersecurity for IT Management

Background: Cybersecurity serves as a defense mechanism against unauthorized access, theft, information disclosure, and service disruptions for electronic data, networks, and computer systems. Traditional cybersecurity strategies have struggled to counter increasingly sophisticated and automated cyberattacks, necessitating the exploration of advanced solutions such as artificial intelligence (AI). Aim: This research aims to highlight the role of AI technology and systems in enhancing cybersecurity measures, addressing how AI-based solutions can defend against cyber threats and identifying the associated challenges and future research directions. Methodology: A systematic literature review was conducted, focusing on recent advancements in AI applications for cybersecurity. Key databases and search engines were utilized to gather relevant articles, which were then filtered based on criteria such as language, publication quality, citation count, and accessibility. The collected literature was analyzed to extract insights on AI methods and their uses in cybersecurity. Results: The study found that AI offers several benefits in addressing cybersecurity concerns. AI systems can identify novel and complex cyber threats, handle substantial volumes of security data, and establish baselines for normal network behavior to detect deviations. Various AI techniques, including neural networks, expert systems, intelligent agents, and machine learning, were identified as effective tools in combating cyber threats. AI has demonstrated significant improvements in the detection and prevention of cyberattacks, enhancing overall cybersecurity effectiveness. Findings: While AI enhances cybersecurity capabilities, it also introduces new challenges such as the need for substantial data and resources, managing false alarms, and vulnerability to adversarial attacks. The study underscores the importance of continuous research to develop robust AI systems that can adapt to evolving cyber threats. Future research should focus on addressing the limitations of AI in cybersecurity, including adversarial threats, data integrity, and human-machine collaboration.

Providing organizations with a validated instrument for an Enterprise Service Management capability

In light of new digital opportunities, enterprises require modernization also with regard to intra-organizational business and IT management. Enterprise Service Management (ESM) is an organizational capability aimed at a more efficient and effective IT and business service management in organizations. Although ESM has been recognized as an approach to improve customer and employee satisfaction and to create digital competitive advantage, there is a methodological and analytical void for organizations in how to measure their ESM capability. Motivated by this lack of measurability and tangibility, we aim to empirically validate the ESM capability model. Our contribution to this paper is empirical, as we provide a measurable instrument for further ESM studies. We aim to initiate a broader debate on ESM and thereby add to the scholarly establishment of the concept in the Information Systems and IT Management literature. Practically, we contribute by offering companies a validated and actionable set of ESM characteristics.

CYBERSECURITY PRACTICES AND FRAUD PREVENTION AMONG GHANAIAN TELECOMMUNICATION FIRMS, A MIXED METHOD ANALYSIS

This study explores the effectiveness of cybersecurity practices in preventing fraud within Ghanaian telecommunication firms, adopting a qualitative research approach to gain in-depth insights into the challenges and strategies involved. By focusing on the perspectives of key personnel directly involved in cybersecurity and fraud prevention, the study aims to uncover critical factors influencing the success of these practices. A case study design is employed, examining cybersecurity implementation across five major telecommunication firms in Ghana. The sample consists of 15 participants, including IT managers, cybersecurity officers, and fraud prevention specialists, selected through purposive sampling to ensure relevant and insightful data collection. Semi-structured interviews are used as the primary data collection method, allowing participants to provide detailed and nuanced information on their experiences with cybersecurity measures. Thematic analysis is employed to identify key patterns and themes within the data, highlighting the role of insider threats, regulatory frameworks, and employee behavior in contributing to fraud. The findings indicate that while robust technical measures such as encryption, multi-factor authentication, and intrusion detection systems play a significant role in reducing fraud, challenges in enforcement, compliance, and employee behavior remain critical barriers. The study concludes that a holistic approach, combining technical solutions with organizational culture improvements and stronger regulatory enforcement, is essential for enhancing cybersecurity effectiveness in Ghana’s telecommunication sector. Recommendations are made for improving incident response times, regulatory support, and employee training programs, as well as fostering greater collaboration between firms and regulatory bodies to strengthen fraud prevention efforts.<p> </p><p><strong> Article visualizations:</strong></p><p><img src="/-counters-/soc/0709/a.php" alt="Hit counter" /></p>

The Effects of IT Management Certification Type and Corporate Social Responsibility Performance on Investors’ Responses to Cybersecurity Breaches

ABSTRACT We investigate the joint effects of IT management certification type (for example, International Organization for Standardization (ISO) 27001 certification, the certification of a company’s Information Security Management System against the ISO 27001 standard, the leading international standard focused on information security) and CSR performance on investors’ responses to cybersecurity breaches. We find that the ISO 27001 certificate issued by an independent certification body serves as a proactive remedial strategy for reputation management and attenuates investors’ negative reactions following data breaches. However, the connection between the certification body that issues the certificate and the financial audit firm of the audited company may impair the effectiveness of the certificate serving as a remedial strategy for cybersecurity breaches. Similarly, superior CSR performance provides insurance-like protection and spillovers to reduce investors’ negative responses to cybersecurity breaches. We also provide some evidence suggesting that IT management certification type and CSR performance are likely substitutive mechanisms.

Artificial Intelligence Adoption and Project Success: A Mixed-Method Study

AI's growing acceptance is changing project management's human-centric approach. Project management is using AI to automate and support duties. This change could improve workflows, decision-making, and project efficiency. The full influence of AI on project success is unknown. There is little empirical evidence linking AI use to project outcomes. This ignorance highlights the necessity to study AI's impact on project management. The project management AI industry is expected to expand 38% annually. Since the late 1980s, AI has improved project management by providing more intelligent and autonomous help. Data privacy, accountability, strategic leadership, communication, innovation, and emotional intelligence are important ethical issues. This study examines how AI adoption affects project success through communication and feedback. This mixed-method study examines how AI adoption affects project success. The quantitative phase measured AI communication, feedback, and project progress via a predefined questionnaire. The sample includes construction, IT, manufacturing, healthcare, and finance project managers and team members. Multiple regression analysis and structural equation modelling were employed in IBM SPSS AMOS to examine AI adoption and project success measures. A qualitative phase of semi-structured interviews with respondents contextualised the quantitative data. Thematic analysis gleaned insights from interview transcripts. AI's impact on project success was examined using integrated data, with ethics in mind. The study examined AI tool-project success relationships using a structural equation model. Communication mode, feedback style, and frequency explained 3% of project success variance. Quantitative research showed that AI communication frequency improves project success, whereas mode and style negatively impact it. Participants' qualitative comments indicated six themes that match quantitative findings, and their replies enhance quantitative results and recommend improvements. The study concluded that AI communication frequency positively increases project success, while mode and style negatively affect it. The mixed-methods approach showed that AI tools alone cannot ensure project success; communication style and frequency are. The study recommended among others that organisations should integrate AI tools into project management systems, match AI communication modes to project team preferences, optimise feedback styles, and provide regular updates to improve AI communication. Project teams need ongoing training.

Abstract B044: Assessing Native Americans’ readiness for lung cancer screening and smoking cessation

Abstract Introduction: Among all U.S. racial/ethnic populations, Native Americans (American Indians) experience the highest rates of commercial tobacco use and lung cancer incidence and mortality. The goal of the Native American Commercial Tobacco and lung cancer screening InterventiON Study (NACTIONS) is to address these disparities by measurably increasing lung cancer screening (LCS) in the context of smoking cessation. Building off a history of collaborations, the University of California, Davis (UCD) reached out to two Native-serving Federally Qualified Health Centers (FQHCs) in its catchment area to co-design means to improve lung health among their Native patients. Methods: In recognition of the extra time and effort involved, the UCD offered modest funding to these two FQHCs in inland northern California as well as gift cards for providers in sharing their practices in offering smoking cessation and LCS as well as interviews with their Native patients. Eligibility criteria for LCS were based on the 2021 US Preventive Services Task Force Recommendations that specified age: 50-80 years old and smoking history of 20 pack years for current smokers or those who quit within the past 15 years. We interviewed 14 providers and two categories of Native patients: both who had completed LCS (n=9) and those who are eligible but had not yet been screened (n=8) to understand facilitators, barriers, and solutions. A Native leader provided us with a conceptual framework to understand Native resiliency in addressing addiction to guide our approach. We also convened monthly meetings to discuss observations and co-design next steps. Findings: Both FQHCs reported approximately 400 Native patients eligible for LCS, but the readiness levels for interventions to promote smoking cessation and LCS were not the same. Each FQHC is under-resourced and each FQHC’s electronic medical system was not originally formulated for research. However, IT directors were willing to increase their scope to document patients’ readiness for intervention and their smoking histories through the LCS process. Common to both FQHCs is the essentiality of earned trust with their patients; adapting each FQHC’s electronic health system for precisely identifying eligible patients and longitudinally following them; assessing their social determinants of health; and the need to provide lung health education for the entire community. For instance, the high prevalence of diabetes, substance abuse, homelessness, etc. must be considered and the need to have tribal, friends, and family support for lung health can be reinforced through community-wide health education and patient navigation. Conclusions: This needs assessment documented factors that will enhance efforts for promoting LCS and smoking cessation at two Native-serving FQHCs. Promoting lung health through smoking cessation and increased completions of LCS can be better achieved through collaboration, addressing both social and physiological determinants of health, and earned trust. Citation Format: Julie Dang, Mayra Sandoval, David Cooke, Miriam Nuno, Carla Martin, Bobbi Jo Simmons, Teresa Martens, Elisa Tong, Moon S. Chen Jr. Assessing Native Americans’ readiness for lung cancer screening and smoking cessation [abstract]. In: Proceedings of the 17th AACR Conference on the Science of Cancer Health Disparities in Racial/Ethnic Minorities and the Medically Underserved; 2024 Sep 21-24; Los Angeles, CA. Philadelphia (PA): AACR; Cancer Epidemiol Biomarkers Prev 2024;33(9 Suppl):Abstract nr B044.

Utilizing Cobit 4.1 and Balance Scorecard to Manage Information Technology Business Process in Higher Education Institution

Pamulang University's Information Technology Strategy Plan aims to develop a comprehensive strategy to maximize IT efficiency and effectiveness in the institution. Using the COBIT 4.1 approach, SWOT analysis, and Balanced Scorecard, this plan identifies strengths, weaknesses, opportunities, and threats in the current IT infrastructure and develops an integrated strategy for IT development. COBIT 4.1 provides a framework for managing and controlling IT by ensuring that IT processes support business objectives and meet stakeholder needs. The SWOT analysis explores the internal and external factors that influence IT at Pamulang University, while the Balanced Scorecard helps in establishing balanced strategic metrics and objectives across multiple perspectives, including financial, customer, internal processes, and learning and growth. This strategic plan is expected to improve IT management, support the achievement of Pamulang University's goals and facilitate data-based decisions for innovation and continuous improvement.

Information Technology Governance Between Iso 38500, Risk It and Val It in Private University

This study explores the application of the ISO 38500, Risk IT, and Val IT frameworks in improving IT governance at the university. ISO 38500 provides general guidance for IT management by boards of directors, while Risk IT focuses on IT risk management and Val IT focuses on managing the value of IT investments. Qualitative research methods were used, including interviews with key stakeholders at Pamulang University. The research results show that the integration of the ISO 38500, Risk IT, and Val IT frameworks has helped universities optimize strategic decision-making regarding IT. Implementation of this framework increases transparency, accountability and holistic IT risk management across the university. However, challenges faced include a lack of deep understanding of the framework and the need to ensure consistency in implementation. Recommendations for the university include more intensive training for staff, strengthening communication between different units, and developing performance metrics that align with the university's strategic goals. This research makes an important contribution to the practical understanding of implementing effective IT governance in higher education environments, by highlighting the benefits and challenges of integrating the ISO 38500, Risk IT, and Val IT frameworks.

Relationship Between Occupational Stress Level and Readiness Towards Knowledge Sharing Among IT Sector Employees

In the era of a knowledge-based economy, effective knowledge management, including knowledge sharing, is one of the determinants of organizational performance. Therefore, the task of companies should be to optimize the process of knowledge sharing, which is achieved by, among other things, a thorough understanding and use of the factors that affect this process. Aim. The purpose of the article was to study the relationship between the level of occupational stress and readiness towards knowledge sharing among IT Sector Employees. Method. A cross-sectional study model was applied. The study included 98 employees from the IT industry. The study used the Perceived Stress at Work Scale (PSaW) by Chirkowska-Smolak and Grobelny and a self-designed survey including: demographic data, work-related variables and questions about knowledge sharing with co-workers. Results. In the surveyed group of IT workers, greater readiness to share knowledge was found among employees who showed lower scores on the PSaW scale. In addition, significant relationships were found between the study variables according to the selected variables, including that among women with low rates of perceived stress at work, older women showed greater willingness to share knowledge compared to younger women. Furthermore, in terms of work-related variables, the results showed that among men declaring high rates of stress, those with shorter seniority were more willing to share knowledge compared to men with longer seniority. Conclusions: The research findings significantly broaden knowledge in the sphere of the factors influencing the effective organization of the knowledge management process, particularly knowledge sharing under stressful work conditions. This knowledge can be useful especially for IT managers.