The relevance of CobiT 5 on IT programme management governance
- Nyandongo, Kwete, Marnewick, Carl
- Authors: Nyandongo, Kwete , Marnewick, Carl
- Date: 2012
- Subjects: IT Governance , Information Technology , Programme Management
- Language: English
- Type: Conference proceedings
- Identifier: http://hdl.handle.net/10210/474484 , uj:42770 , Citation: Nyandongo, K. & Marnewick, C. 2012. The relevance of CobiT 5 on IT programme management governance.
- Description: Abstract: Organisations exist to create value for their stakeholders. In order to do so, an organisation has to establish overall corporate governance mechanisms that set rules and structures for direction and control, while ensuring the delivery of corporate performance and sustainable value-capital enhancement in accordance with corporate strategy; thus, maintaining stakeholders’ confidence. The extent to which business relies on Information Technology (IT) has emphasised the need to extend corporate governance mechanisms to IT. Organisations have become totally reliant on IT for success, and it has even become impossible for many to function without it. As the business strategy of an organisation relies on IT, the organisation must have the same level of commitment devoted to financial supervision and overall enterprise governance including IT. IT governance has become a crucial part of a successful compliance effort as numerous IT frameworks exist, providing guidance on how IT within an organisation should be directed and controlled. Various studies have proven that most IT investments are made within the organisation through IT projects. The board should therefore oversee the value delivery of IT, and monitor the return on investment from significant IT projects. The Control Objective for Information and Related Technologies (CobiT), considered to be the authoritative source of IT governance that addresses the full spectrum of IT governance duties, ties the business requirements of IT information and governance to the objectives of the IT service function; thus, failing to consider the complexities and temporary aspects of IT projects, specifically when these are undertaken in the context of an IT programme for their coordinated management in order to achieve benefits of strategic importance. By considering that CobiT 5 can be an important source of IT governance, this paper addresses three questions: (i) What are CobiT 5’s governance requirements that are relevant to IT programme management governance? (ii) What are the possible implications for IT programme management? and (iii) How would these implications be connected, integrated and aligned with the temporary aspect of an IT programme management framework? The research is an exploratory study designed to provide the relevance and implications of IT governance for IT programme management governance, using qualitative content analysis and inductive reasoning. A literature review is used to establish the foundation of programme management, and modelling by design will be useful for aligning implications derived from CobiT 5 to programme management. The results of this paper will extend and contextualise CobiT 5’s governance requirements to IT programme management. This will ensure that the focus areas and objectives of IT governance are covered, and that the main concerns of the executive regarding IT governance are addressed. By considering the huge investment placed in an IT programme and the consequence of its failure to the organisation, it is important to provide executives, the programme management team as well as academics with information on how an IT programme can be managed while ensuring they remain compliant with IT governance requirements.
- Full Text:
- Authors: Nyandongo, Kwete , Marnewick, Carl
- Date: 2012
- Subjects: IT Governance , Information Technology , Programme Management
- Language: English
- Type: Conference proceedings
- Identifier: http://hdl.handle.net/10210/474484 , uj:42770 , Citation: Nyandongo, K. & Marnewick, C. 2012. The relevance of CobiT 5 on IT programme management governance.
- Description: Abstract: Organisations exist to create value for their stakeholders. In order to do so, an organisation has to establish overall corporate governance mechanisms that set rules and structures for direction and control, while ensuring the delivery of corporate performance and sustainable value-capital enhancement in accordance with corporate strategy; thus, maintaining stakeholders’ confidence. The extent to which business relies on Information Technology (IT) has emphasised the need to extend corporate governance mechanisms to IT. Organisations have become totally reliant on IT for success, and it has even become impossible for many to function without it. As the business strategy of an organisation relies on IT, the organisation must have the same level of commitment devoted to financial supervision and overall enterprise governance including IT. IT governance has become a crucial part of a successful compliance effort as numerous IT frameworks exist, providing guidance on how IT within an organisation should be directed and controlled. Various studies have proven that most IT investments are made within the organisation through IT projects. The board should therefore oversee the value delivery of IT, and monitor the return on investment from significant IT projects. The Control Objective for Information and Related Technologies (CobiT), considered to be the authoritative source of IT governance that addresses the full spectrum of IT governance duties, ties the business requirements of IT information and governance to the objectives of the IT service function; thus, failing to consider the complexities and temporary aspects of IT projects, specifically when these are undertaken in the context of an IT programme for their coordinated management in order to achieve benefits of strategic importance. By considering that CobiT 5 can be an important source of IT governance, this paper addresses three questions: (i) What are CobiT 5’s governance requirements that are relevant to IT programme management governance? (ii) What are the possible implications for IT programme management? and (iii) How would these implications be connected, integrated and aligned with the temporary aspect of an IT programme management framework? The research is an exploratory study designed to provide the relevance and implications of IT governance for IT programme management governance, using qualitative content analysis and inductive reasoning. A literature review is used to establish the foundation of programme management, and modelling by design will be useful for aligning implications derived from CobiT 5 to programme management. The results of this paper will extend and contextualise CobiT 5’s governance requirements to IT programme management. This will ensure that the focus areas and objectives of IT governance are covered, and that the main concerns of the executive regarding IT governance are addressed. By considering the huge investment placed in an IT programme and the consequence of its failure to the organisation, it is important to provide executives, the programme management team as well as academics with information on how an IT programme can be managed while ensuring they remain compliant with IT governance requirements.
- Full Text:
Communicating information systems security policies : perception and determinism theories
- Rantao, Tsholofelo, Njenga, Kennedy
- Authors: Rantao, Tsholofelo , Njenga, Kennedy
- Date: 2019
- Subjects: Information Technology , Policies , Perception Theories
- Language: English
- Type: Conference proceedings
- Identifier: http://hdl.handle.net/10210/400897 , uj:33480 , Citation: Rantao, T. & Njenga, K. 2019. Communicating information systems security policies : perception and determinism theories.
- Description: Abstract: Information security breaches are one of the fastest growing trends in the world. The pace and progression exceeds what many corporate companies can handle. That is why companies cannot rely on security technology to help reduce the risk of being compromised only, however employees also need to be involved. The goal of the study was to test the relationship between communication models and information security compliance. The researcher identified communication theories, which would later be used to develop into a framework called Miscellany of Perception and Determinism (MPD). Ten factors were extracted from this framework to test the relationship between communication and information security compliance at organizations. The MPD Framework shows that there is a significant relationship between the dependent variable Information security compliance and independent variables (communication factors) like Media Appropriateness, Reason for Communication, Non Conflicting Interpretations, Feedback Immediacy and Personal Focus. The findings also show that personal focus, non-conflicting interpretations, feedback immediacy, media appropriateness, and reason for communication explain 61.3 percent of information security compliance. The implications of these findings is that communication mediums used by organizations are generalised and do not consider user experience for promoting understanding thus influencing behaviour. Findings show that once policy communication includes the consideration of personal focus, feedback immediacy, non-conflicting interpretations, media appropriateness and the reason for communication, organizations have a greater chance of improving employee security compliance.
- Full Text:
- Authors: Rantao, Tsholofelo , Njenga, Kennedy
- Date: 2019
- Subjects: Information Technology , Policies , Perception Theories
- Language: English
- Type: Conference proceedings
- Identifier: http://hdl.handle.net/10210/400897 , uj:33480 , Citation: Rantao, T. & Njenga, K. 2019. Communicating information systems security policies : perception and determinism theories.
- Description: Abstract: Information security breaches are one of the fastest growing trends in the world. The pace and progression exceeds what many corporate companies can handle. That is why companies cannot rely on security technology to help reduce the risk of being compromised only, however employees also need to be involved. The goal of the study was to test the relationship between communication models and information security compliance. The researcher identified communication theories, which would later be used to develop into a framework called Miscellany of Perception and Determinism (MPD). Ten factors were extracted from this framework to test the relationship between communication and information security compliance at organizations. The MPD Framework shows that there is a significant relationship between the dependent variable Information security compliance and independent variables (communication factors) like Media Appropriateness, Reason for Communication, Non Conflicting Interpretations, Feedback Immediacy and Personal Focus. The findings also show that personal focus, non-conflicting interpretations, feedback immediacy, media appropriateness, and reason for communication explain 61.3 percent of information security compliance. The implications of these findings is that communication mediums used by organizations are generalised and do not consider user experience for promoting understanding thus influencing behaviour. Findings show that once policy communication includes the consideration of personal focus, feedback immediacy, non-conflicting interpretations, media appropriateness and the reason for communication, organizations have a greater chance of improving employee security compliance.
- Full Text:
Disclosure of information technology governance by South African state-owned entities
- Authors: Vutabwarova, V. , Keevy, M.
- Date: 2019
- Subjects: Information Technology , Integrated Reporting , Governance
- Language: English
- Type: Conference proceedings
- Identifier: http://hdl.handle.net/10210/402163 , uj:33643 , Citation: Vutabwarova, V. & Keevy, M. 2019. Disclosure of information technology governance by South African state-owned entities.
- Description: Abstract: Information Technology (IT) has become an invaluable business asset, making IT governance an important part of corporate governance. State-owned entities (SOEs) are fundamental to governments’ structure, as they assist in the pursuit of political, social and economic agendas. Particularly in South Africa, these entities play a significant role in socio-economic development. Furthermore, given the corruption challenges experienced by SOEs in South Africa and other developing countries, it is essential that entities – funded through taxpayers’ money – have structures that govern and oversee IT. Using content analysis to extract data from annual integrated reports, this paper explored the King III governance disclosures of SOEs. The findings suggest that in general, there is poor disclosure of IT governance by SOEs, as only one entity met all the recommended King III disclosure principles. Furthermore, the study found that although most SOEs do disclose some form of IT governance information, these disclosures often lacked detail. It is recommended that SOEs include a specific section dedicated to IT in their integrated reports, which would increase compliance with the King Code principles. This research makes a useful contribution to prioritising IT governance policies, especially due to the significant spend by most organisations on IT.
- Full Text:
- Authors: Vutabwarova, V. , Keevy, M.
- Date: 2019
- Subjects: Information Technology , Integrated Reporting , Governance
- Language: English
- Type: Conference proceedings
- Identifier: http://hdl.handle.net/10210/402163 , uj:33643 , Citation: Vutabwarova, V. & Keevy, M. 2019. Disclosure of information technology governance by South African state-owned entities.
- Description: Abstract: Information Technology (IT) has become an invaluable business asset, making IT governance an important part of corporate governance. State-owned entities (SOEs) are fundamental to governments’ structure, as they assist in the pursuit of political, social and economic agendas. Particularly in South Africa, these entities play a significant role in socio-economic development. Furthermore, given the corruption challenges experienced by SOEs in South Africa and other developing countries, it is essential that entities – funded through taxpayers’ money – have structures that govern and oversee IT. Using content analysis to extract data from annual integrated reports, this paper explored the King III governance disclosures of SOEs. The findings suggest that in general, there is poor disclosure of IT governance by SOEs, as only one entity met all the recommended King III disclosure principles. Furthermore, the study found that although most SOEs do disclose some form of IT governance information, these disclosures often lacked detail. It is recommended that SOEs include a specific section dedicated to IT in their integrated reports, which would increase compliance with the King Code principles. This research makes a useful contribution to prioritising IT governance policies, especially due to the significant spend by most organisations on IT.
- Full Text:
Improving resilience of cities through smart city drivers
- Oke, Ayodeji Emmanuel, Aghimien, Douglas O., Akinradewo, Opeoluwa I., Aigbavboa, Clinton O.
- Authors: Oke, Ayodeji Emmanuel , Aghimien, Douglas O. , Akinradewo, Opeoluwa I. , Aigbavboa, Clinton O.
- Date: 2020
- Subjects: Information Technology , Resilient City , Smart City
- Language: English
- Type: Article
- Identifier: http://hdl.handle.net/10210/435547 , uj:37747 , Citation: Oke, A.E., Aghimien, D.O., Akinradewo, O.I., and Aigbavboa, C.O. 2020. Improving resilience of cities through smart city drivers. Construction Economics and Building, 20:2, 45-64. http:// dx.doi.org/10.5130/AJCEB. v20i2.6647 , ISSN: 2204-9029
- Description: Abstract: The embracement of smart city approach as a sustainable system for the management and delivery of infrastructural developments has been on the increase, especially in developed and some developing countries. For this to be successful, cities in these countries, particularly in developing ones like South Africa, needs to be resilient because even though resilience can be achieved by making cities smart, smartness does not bring resilience by default. Thus, this study examines various factors influencing the ability of cities to develop resilience through smart city drivers. A survey of construction professionals involved in the design, planning, development and general management of cities and their infrastructure was carried out with the aid of a well-structured questionnaire. Factors influencing resilience were grouped into five divisions which are climate change, education, food security, public safety and threat to disease, in order of their importance. Findings revealed that the most important of these factors are the development of literacy and technical skills of citizens, regeneration of agricultural land and increased localised food production. The paper further examined the effects of these factors on six smart city drivers and found out that smart economy has the most influence on the resilience of a city. It was concluded that stakeholders concerned with the achievement of resilient smart city must
- Full Text:
- Authors: Oke, Ayodeji Emmanuel , Aghimien, Douglas O. , Akinradewo, Opeoluwa I. , Aigbavboa, Clinton O.
- Date: 2020
- Subjects: Information Technology , Resilient City , Smart City
- Language: English
- Type: Article
- Identifier: http://hdl.handle.net/10210/435547 , uj:37747 , Citation: Oke, A.E., Aghimien, D.O., Akinradewo, O.I., and Aigbavboa, C.O. 2020. Improving resilience of cities through smart city drivers. Construction Economics and Building, 20:2, 45-64. http:// dx.doi.org/10.5130/AJCEB. v20i2.6647 , ISSN: 2204-9029
- Description: Abstract: The embracement of smart city approach as a sustainable system for the management and delivery of infrastructural developments has been on the increase, especially in developed and some developing countries. For this to be successful, cities in these countries, particularly in developing ones like South Africa, needs to be resilient because even though resilience can be achieved by making cities smart, smartness does not bring resilience by default. Thus, this study examines various factors influencing the ability of cities to develop resilience through smart city drivers. A survey of construction professionals involved in the design, planning, development and general management of cities and their infrastructure was carried out with the aid of a well-structured questionnaire. Factors influencing resilience were grouped into five divisions which are climate change, education, food security, public safety and threat to disease, in order of their importance. Findings revealed that the most important of these factors are the development of literacy and technical skills of citizens, regeneration of agricultural land and increased localised food production. The paper further examined the effects of these factors on six smart city drivers and found out that smart economy has the most influence on the resilience of a city. It was concluded that stakeholders concerned with the achievement of resilient smart city must
- Full Text:
- «
- ‹
- 1
- ›
- »