A 2023 cybersecurity research study highlighted the risk of increased technology investment not being matched by a proportional investment in cybersecurity, exposing organizations to greater cyber identity compromise vulnerabilities and risk. The result is that a survey of security professionals found that 240\% expected growth in digital identities, 68\% were concerned about insider threats from employee layoffs and churn, 99\% expect identity compromise due to financial cutbacks, geopolitical factors, cloud adoption and hybrid work, while 74\% were concerned about confidential data loss through employees, ex-employees and third party vendors. In the light of continuing growth of this type of criminal activity, those responsible for keeping such risks under control have no alternative than to use continually more defensive measures to prevent them from happening and causing unnecessary businesses losses. This research project explores a real-life case study: an Artificial Intelligence (AI) information systems solution implemented in a mid-size organization facing significant cybersecurity threats. A holistic approach was taken, where AI was complemented with key non-technical elements such as organizational structures, business processes, standard operating documentation and training - oriented towards driving behaviours conducive to a strong cybersecurity posture for the organization. Using Design Science Research (DSR) guidelines, the process for conceptualizing, designing, planning and implementing the AI project was richly described from both a technical and information systems perspective. In alignment with DSR, key artifacts are documented in this research, such as a model for AI implementation that can create significant value for practitioners. The research results illustrate how an iterative, data-driven approach to development and operations is essential, with explainability and interpretability taking centre stage in driving adoption and trust. This case study highlighted how critical communication, training and cost-containment strategies can be to the success of an AI project in a mid-size organization. / Thesis / Doctor of Science (PhD) / Artificial Intelligence (AI) is now pervasive in our lives, intertwined with myriad other technology elements in the fabric of society and organizations. Instant translations, complex fraud detection and AI assistants are not the fodder of science fiction any longer. However, realizing its bene fits in an organization can be challenging. Current AI implementations are different from traditional information systems development. AI models need to be trained with large amounts of data, iteratively focusing on outcomes rather than business requirements. AI projects may require an atypical set of skills and significant financial resources, while creating risks such as bias, security, interpretability, and privacy. The research explores a real-life case study in a mid-size organization using Generative AI to improve its cybersecurity posture. A model for successful AI implementations is proposed, including the non-technical elements that practitioners should consider when pursuing AI in their organizations.

In modern dynamic business environment, every enterprise needs to emphasize more on IT in order to increase the benefit. The well-performed IT governance is the key to effectively apply IT resource. This research focus on the following dimension: IT governance maturity, IT Governance Archetype, Strategic alignment and Organization performance. Accoridng to the literature, an empirical research was performed to examine the relation among these four dimensions. Through the empirical research, this research verify the significant positive relation among IT governance maturity, strategic alignment and organization performance. Also among IT governance Archetype (the level of centralized) and strategic alignment. As for IT governance Archetype (the level of professionalize), there is significant positive relation between IT governance Archetype (the level of professionalize) and stragic alignment and significant negative relation between IT governance Archetype (the level of professionalize) and organization performance.

Previous studies have been made on various aspects of IT governance in public government organizations in developing countries and revealed several major issues. However, due to limited knowledge, it is unclear what IT Governance (ITG) practice is in place in public organizations. The purpose of this study is therefore to investigate the adopted IT management practices and their influence on the effectiveness of IT management in the Tanzanian public government organization. A qualitative study was done using the holistic multiple case study strategy. Data was collected using the semi-structured interview method with heads of IT in three Tanzanian public government organizations. The analysis of this study showed that senior managers involvement in IT projects, Office of CIO and the IT leadership are key ITG practices adopted in the three Tanzanian public government organizations. Senior management involvement in IT projects was found to influence knowledge sharing through collaboration between IT and business units. Furthermore, the CIO office was found to influence the organization's decision-making through direct representation to the decision-making body by a person who monitors and issues IT directives. Furthermore, IT management was found to have an influence on simplifying knowledge sharing between IT and business units, as well as monitoring IT issues and issuing IT directives in the organization. Given these findings, our study contributes knowledge into the literature on IT governance with special emphasis on governmental organizations in developing countries.

Studien grundas i digitaliseringskommissionens krav på en ökad koppling mellan IT och verksamhet inom offentlig sektor samt att tidigare studier definierat en rådande problematik gällande IT-arbetet inom offentlig sektor. Vidare grundas studien även i en påvisad problematik gällande en otydlighet om vad organisationer kan arbeta med för att främja mogen IT governance. Studien har som syfte att identifiera faktorer som är viktiga att arbeta med för att en organisation ska nå en hög grad av IT governance-mognad. Med grund i detta formulerades forskningsfrågan ”vad arbetar organisationer inom offentlig sektor med för att främja mogen IT governance”. Data har empiriskt samlats in genom intervjuer och enkäter från 23 olika organisationer, samt teoretiskt genom en litteraturstudie. Det sammanställda materialet har analyserats via tematisk dataanalys. Resultatet är sammanställt i form av faktorer som beskriver vad organisationer kan arbeta  med för att främja en mogen IT governance. Resultaten visar att följande faktorer är viktiga att arbeta med: Engagemang, tydlig roll och ansvarsfördelning, IT integreras med andra enheter inom organisationen, IT governance finns med i organisationens framtidsvision, samspel mellan IT och verksamhet, medvetenhet av IT-relaterade risker, mätbarhet, beslutsprocesser gällande IT, tydlig kommunikation gällande IT, anpassad organisationsstruktur, tydligt definierade och uppdaterade ITstyrdokument samt uppföljning. Slutligen, påvisar resultaten även att  mogen IT governance är ett område som kräver ett aktivt engagemang över  längre tid för att nå sin fulla effekt. Studiens kunskapsbidrag är en tydlig definition av vad organisationer inom offentlig sektor kan fokusera på för att nå mogen IT governance. Detta kan främja den problematik som påvisats gällande IT governance och IT-styrning inom offentlig sektor.

Denna uppsats behandlar IT-arbete med fokus på IT-styrning, med offentlig sektor som utgångspunkt. Arbetet baseras på en två månaders praktik som utförts vid ett av Sveriges landsting, där arbetet vid huvudkontorets IT-avdelning har observerats och intervjuer utförts. Arbetet presenterar den struktur för IT-styrande som landstinget använde då praktiken utfördes. Det presenterar dessutom svårigheter som upplevs av de som styr landstingets IT i brist på dels detaljerade styrdokument för IT, och dels ett bristande stöd ifrån ledningen. Detta leder vidare till en teoretisk diskussion kring IT-governance, Shared services samt Strategizing. Det hela fångas upp i en diskussion som redogör för de olika styrande aspekternas påverkan på IT-strategi och IT-arbete. Arbetet bidrar därmed till kunskapsbasen kring IT-styrning genom analys av IT-arbete offentlig sektor.

Research report (M.Com. (Information Systems))--University of the Witwatersrand, Faculty of Commerce, Law and Management, School of Economic and Business Sciences, 2013. / Using the resource based view of the firm theory, a research model is proposed that explains how IT governance capability results in improved firm performance by improving a firm’s IT Infrastructure capabilities and business processes. The research model is explored by means of case study where a survey is undertaken with the key stakeholders of a global Corporate and Investment Bank. Data was collected and analysed from 140 respondents using an online survey. The model hypotheses were not tested. The respondents’ characteristics (role, region, business area and length of experience) were explored providing greater insight and confirmation of the general relationship between the variables. The case study confirmed the general relationships of the model except the training capability - firm performance relationship. The IT governance process formality moderator provided results that were in contradiction to expectations. The IT intensity moderator confirmed the general relationship. The strength or weaknesses of the relationships when analysing the respondent characteristics are insightful and would not normally have been available if a multi-site survey had been performed.

This research intends to investigate the relationships among governance environment, organizational structure, information technology governance, information technology use, and information technology performance. An empirical study was conducted to collect from Taiwanese companies. The result shows three major findings. First, small positive effect exists between information technology use and the alignment between governance environment and organization structure. Second, information technology use has positive effects on information technology performance. Finally, the relative governance of IT department does not affect IT use. This research helps organizations understand how information technology governance affects IT use and performance. Organizations could adjust their organization governance strategy to fir its structural and cultural environment in order to improve information technology performance.

This study presents a conceptual model to investigate the electronic health (E-Health) capability required by healthcare professionals. First, a scale to measure E-Health capability was developed and validated, then it was used to collect the survey data. Second, the partial least squares (PLS) method was used to empirically test the conceptual model and hypotheses through the survey data collected. The empirical results support the proposed structure for E-Health capability encompassing the three skills/knowledge domains: IT governance capability, practice management capability, and business model innovativeness. The findings improve our understanding of the concept of E-Health capability. The conceptual model of E-Health capability is of particular value to those concerned with skills/knowledge training and competency development for healthcare professionals in healthcare organizations. Healthcare organizations can develop E-Health capability profiles for individual healthcare professionals in accordance with their own organization contexts.

Good corporate governance has, in recent years, been placed on centre stage worldwide and several frameworks have been put in place to enable organisations as well as higher education institutions to adhere to effective IT governance with regards to IT service delivery and support. At the same time, demand from users for access to corporate resources with their own personal devices other than desktop or laptop computers and options such as cloud computing, social media and mobility have converged into a renewed driving force influencing all IT decisions regarding service delivery and support, whilst higher education institutions attempt to comply with governance regulations. The aim of this study was to investigate whether ITIL as an IT governance framework is still applicable and relevant to a changed service delivery context in IT service delivery departments in the higher education sector in South Africa. Higher education in South Africa has not been excluded from adhering to good governance and the draft Regulations for Reporting by Higher Education Institutions have been updated with the recommendations of King III which, for the first time, addressed IT governance and insisted on management to implement an IT governance framework. ITIL is one of the most widely used governance frameworks, however its position as a technology on the Gartner Hype Cycles for Education for 2011 and 2012 displayed a move backwards from being widely understood to a display of waning interest amongst institutions in the education sector worldwide. Exploratory research found that ITIL is still valued as a governance framework in higher education in South Africa however staff members in IT support departments displayed a resistance to change and also found it difficult to implement ITIL processes. This is, however, not primarily due to a changing IT service delivery context. Findings also indicated that ITIL should be considered as a set of guidelines and best practices and not a governance framework as such. Recommendations towards a paradigm shift regarding ITIL as a governance framework per se as well as a proposal towards a possible alternative conceptual IT governance framework incorporating only ITIL guidelines and best practices as well as COBIT for risk management were put forward. / Thesis (MBA)--North-West University, Potchefstroom Campus, 2013

Good corporate governance has, in recent years, been placed on centre stage worldwide and several frameworks have been put in place to enable organisations as well as higher education institutions to adhere to effective IT governance with regards to IT service delivery and support. At the same time, demand from users for access to corporate resources with their own personal devices other than desktop or laptop computers and options such as cloud computing, social media and mobility have converged into a renewed driving force influencing all IT decisions regarding service delivery and support, whilst higher education institutions attempt to comply with governance regulations. The aim of this study was to investigate whether ITIL as an IT governance framework is still applicable and relevant to a changed service delivery context in IT service delivery departments in the higher education sector in South Africa. Higher education in South Africa has not been excluded from adhering to good governance and the draft Regulations for Reporting by Higher Education Institutions have been updated with the recommendations of King III which, for the first time, addressed IT governance and insisted on management to implement an IT governance framework. ITIL is one of the most widely used governance frameworks, however its position as a technology on the Gartner Hype Cycles for Education for 2011 and 2012 displayed a move backwards from being widely understood to a display of waning interest amongst institutions in the education sector worldwide. Exploratory research found that ITIL is still valued as a governance framework in higher education in South Africa however staff members in IT support departments displayed a resistance to change and also found it difficult to implement ITIL processes. This is, however, not primarily due to a changing IT service delivery context. Findings also indicated that ITIL should be considered as a set of guidelines and best practices and not a governance framework as such. Recommendations towards a paradigm shift regarding ITIL as a governance framework per se as well as a proposal towards a possible alternative conceptual IT governance framework incorporating only ITIL guidelines and best practices as well as COBIT for risk management were put forward. / Thesis (MBA)--North-West University, Potchefstroom Campus, 2013