IT Risk management is becoming increasingly important for CIOs and their executive counterparts. Educators and managers have materials they can use to discuss specific IT risks in project management, security and other risk-related topics, but they have few resources they can use to have a holistic discussion of enterprise-level IT risk management. This case is intended to address the gap. It describes the IT risks facing a large financial services firm, PFPC, as a result of rapid growth, a large merger and distributed management of the IT function. The firm’s first enterprise-wide CIO, Martin Deere used risk management as a key pillar in a major revamp of the firm's applications and IT capabilities. The case is rich in detail on the firm's IT risks, the new risk management process, including examples of the firm's risk management tools. It also describes early lessons and outcomes in the implementation of risk management capabilities. The case has enough richness and potential controversy to engage students from the undergraduate through executive levels in an informative and interesting discussion of IT risk management.

nÃo hà / O Governo EletrÃnico à uma estratÃgia que utiliza dos recursos disponÃveis da Tecnologia da InformaÃÃo (TI) no Poder PÃblico, com vistas à uma melhor prestaÃÃo de serviÃos/informaÃÃes aos cidadÃos, à melhoria da sua gestÃo interna e à interaÃÃo com parceiros e fornecedores. A GovernanÃa de TI tem por principal objetivo o alinhamento das suas aÃÃes Ãs estratÃgias definidas em um determinado negÃcio. Considerando ser o Governo EletrÃnico estratÃgico ao Poder Executivo do Estado do Cearà e a GovernanÃa de TI, um meio pelo qual a TI apoie e estenda essa estratÃgia, este estudo teve como objetivo analisar a influÃncia das estratÃgias de Governo EletrÃnico em AÃÃes de GovernanÃa de TI, desenvolvidas no ambiente do Governo do Estado do CearÃ. Para tanto, o estudo propÃe como objetivos especÃficos a anÃlise das EstratÃgias de Governo EletrÃnico e a anÃlise das AÃÃes de GovernanÃa de TI existentes nos ÃrgÃos e entidades que compÃem o Poder Executivo do Estado do CearÃ. Trata-se de um Estudo de Caso Ãnico e incorporado, em que as unidades de anÃlises sÃo compostas pelas estratÃgias de Governo EletrÃnico dos ÃrgÃos, bem como suas aÃÃes de GovernanÃa de TI. O estudo de caso utilizou trÃs tipos de evidÃncias, tal como, os documentos das polÃticas de Governo EletrÃnico e GovernanÃa de TI, publicados no DiÃrio Oficial do Estado; QuestionÃrios para o levantamento das estratÃgias de Governo EletrÃnico e das aÃÃes de GovernanÃa de TI, e; Entrevistas em profundidade semiestruturada. Foram coletados 32 documentos de polÃticas. Contaram-se 52 ÃrgÃos, que responderam aos questionÃrios. Realizaram-se 18 entrevistas. Foi utilizado o mÃtodo de AnÃlise de ConteÃdo Qualitativa para anÃlise dos documentos de polÃtica e das entrevistas realizadas. Para tratamento dos dados dos questionÃrios, utilizou-se de tÃcnicas da EstatÃstica Descritiva. As percepÃÃes obtidas com este estudo de caso indicam que a InfluÃncia das EstratÃgias de Governo EletrÃnico em AÃÃes de GovernanÃa de TI ocorrem por meio da observÃncia aos Documentos de PolÃticas relacionados aos temas; e conforme a complexidade dos serviÃos de Tecnologia da InformaÃÃo prestados pelos ÃrgÃos. / The Electronic Government is a strategy that uses available resources of Technology Information (IT) in government, with a view to better provision of services / information to citizens, to improve their internal management and interaction with partners and suppliers. The IT Governance is primarily engaged in the alignment of its shares the strategies defined in a certain business. Considering that the Government Strategic electronic Executive of Ceara Power and IT Governance, a means whereby IT support and extend this strategy, this study aimed to analyze the influence of e-government strategies in IT Governance Shares, developed in the Government of the State of Cearà environment. To this end, the study proposes as specific objectives the analysis of e-government strategies and the analysis of Shares IT governance existing in the organs and entities comprising the Executive Power State of Ceara. This is a unique, embedded Case Study, in which units analyzes are made by the eGovernment strategies of agencies and their IT Governance actions. The case study used three types of evidence, such as the documents of eGovernment policies and IT Governance, published in the Journal Official State; Questionnaires for the survey of e-government strategies and the IT Governance actions, and; In-depth semi-structured interviews. They were collected 32 policy documents. They were counted 52 bodies that responded to questionnaires. 18 interviews were held. We used the content analysis method For qualitative analysis of policy documents and interviews. For data processing of questionnaires, we used the descriptive statistics techniques. At insights gained with this case study indicate that the influence of Strategies Electronic Government IT Governance Actions occur through the observance of Policy documents related to the issues; and according to the complexity of the service Information Technology provided by agencies.

Hlavním cílem této diplomové práce je prozkoumat jednotlivé obecně uznávané rámce, metodiky a standardy určené pro efektivní řízení podnikové informatiky a na základě tohoto zkoumání zjistit, zda existuje jeden konkrétní návod, který lze použít pro efektivní řízení podnikové informatiky. Součástí práce je vydefinování kritérií pro výběr vhodného rámce, metodik a standardů pro konkrétní oblast podnikové informatiky a jejich praktická aplikace ve společnosti TO2CR. Na základě prostudovaných materiálů týkajících se zvolených rámců, metodik a standardů a legislativní norem jsem zvolila kritéria pro výběr vhodné kombinace pro implementaci. Struktura a obsah práce jednotlivých kapitol je navržena tak, aby čtenář postupně získával informace o IT governance, o obsahu a zaměření norem, standardů, metodik a legislativních rámců a o výběru rámce, metodik či standardů pro konkrétní oblast řízení informační bezpečnosti a uvedení případové studie z praxe. Závěrem práce je zjištění, že v současnosti neexistuje žádný dostatečně komplexní návod pro efektivní řízení podnikové informatiky. Naopak je vhodné využít správnou kombinaci těchto rámců, metodik a norem.

[EN] EHealth plays an essential role in supporting healthcare in today's digital society; it is perceived as crucial for high quality and cost-effective healthcare. However, getting the expected benefits from eHealth has been difficult to demonstrate. There has been a raising interest in adopting eHealth Governance frameworks to obtain re-assurance that investments return the expected results in health care. How IT Governance is implemented within healthcare, the actual impact on strategic alignment and its influence to the information society progress, remains poorly understood. For this purpose we have explored the application of these frameworks within the National Health Service in Scotland and their impact on the following three aspects: eHealth Governance maturity, strategic alignment with healthcare and local progress of digital societies. This research is a longitudinal study (2008-2013), involving an exploratory and explanatory multi-case analysis of three representative organisations across Scotland. A combination of empiric methods has been used: semi-structured interviews with implementers, surveys (Strategic Alignment Model), cross-sectoral/national benchmarking based on a literature review and a qualitative analysis of established eHealth progress indicators. Ninety-two participants have been involved across three case studies. The outcomes of this study have been published over a period of 5 years representing a composite thesis based on relevant publications. Results sustain that EHealth Governance is in its infancy across sectors and countries. 80% of the organisations worldwide are in a transition point between a "committed" and an "established" process. Our results support that the more mature eHealth Governance is, the better the strategic alignment between eHealth and health care organisations (HCOs), hence the better progress of eHealth and the Digital Society. The Strategic alignment is slowly maturing across organisations (15% since 2008), indicating a faster development than the overall Digital Society (Scotland) progress indicators. The National eHealth Strategy shows signs of steady progress and very positive eHealth uptake in society with an overall growth of 12% since 2008, despite the deep economical recession within the period of this research. The conclusions of this study as a longitudinal analysis are limited and more research over the forthcoming years is required. For this purpose, a simplified and adapted method to monitor these trends in future HCOs research has also been provided. / [ES] La eSalud juega un papel esencial en el desarrollo de la asistencia médica en sociedades digitales; se percibe como un elemento crucial en la provisión de servicios médico-sanitarios alta calidad y costo-efectivos. A pesar de ello, hasta ahora ha sido difícil demostrar la materialización de los beneficios esperados de la eSalud, pero hay un interés creciente en la adopción de marcos de referencia basados en buenas prácticas, y estándares profesionales internacionales para la gestión y dirección de la eSalud, con el propósito de asegurar que las inversiones revierten los resultados esperados en el cuidado y servicios de la salud. Hasta ahora se sabe muy poco sobre el fenómeno de cómo la eSalud es integrada en el cuidado y servicios de la salud, y del impacto que esta tiene en la alineación estratégica de la eSalud. Igualmente, sabemos muy poco de la influencia real que estas prácticas tienen en el progreso de sociedades digitales. Este estudio se centra en explorar la aplicación de buenas practicas y estándares internacionales como marco de referencia en el gobierno de la eSalud en el servicio de salud Escocés; también contrastamos y comparamos el fenómeno con otros países y sectores. Esta investigación es un estudio longitudinal (2008-2013) que incorpora un análisis exploratorio y explicativo de casos. Se obtuvieron un total de noventa y dos participantes a lo largo de los tres casos estudiados, con representación de los principales grupos de interés (médicos y no médicos). Los resultados se han divulgado a lo largo del periodo de investigación en un compendio de publicaciones relevantes que conforman la tesis. Los principales hallazgos muestran que el gobierno de la eSalud está en su infancia en los sectores y países analizados: el 80% de las organizaciones a nivel mundial presentan este proceso en un punto de transición entre "comprometido" y "establecido" (Modelo SAM). Los resultados corroboran que cuanto más maduro es el gobierno de la eSalud, mayor alineación estratégica entre la eSalud y la organización, y mayor progreso de la variable eSalud en los indicadores de la sociedad de la información. La alineación estratégica esta madurando lentamente (15% desde 2008), sin embargo este crecimiento es mas rápido que el progreso observado en los indicadores de la sociedad digital (Escocia). La estrategia nacional Escocesa muestra signos de progreso sostenido y de integración (por uso o adopción) de las iniciativas de eSalud en la sociedad (crecimiento del 12% desde 2008), a pesar de la profunda depresión económica durante el periodo de investigación. Las conclusiones de esta investigación, como estudio longitudinal, son limitadas y requieren la captura de más datos y observaciones durante los próximos anos. Con el fin de facilitar este proceso, se ha propuesto un método simplificado y adaptado al sector salud, que permite capturar observaciones, comparar y monitorizar estas tendencias en futuras investigaciones en el sector salud. / [CAT] La eSalut juga un paper essencial en el suport a l'assistència sanitària a la societat digital de hui en dia; es percep com crucial per a l'alta qualitat i efectivitat del servicis de salut. No obstant això, ha estat difícil de demostrar la obtenció dels beneficis esperats de la eSalut. Hi ha hagut un interès en augmentar l'adopció de marcs de governança de la eSalut per obtenir re-assegurament que les inversions retornen els resultats esperats en els servicis sanitaris. Com s'implementa la governança de les TIC dins de l'assistència sanitària, l'impacte real en l'alineació estratègica i la seua influència en el progrés de la societat de la informació, continua sent poc conegut. Aquest estudi explora l'aplicació d'aquests estàndards i marcs de referència dins dels Serveis Nacionals de Salut d'Escòcia i el seu impacte en els tres aspectes següents: la maduresa de la governança de la eSalut", l'alineació estratègica amb l'assistència sanitària i, finalment, el progrés local de les societats digitals. Aquesta investigació és un estudi longitudinal (2008-2013), que implica una anàlisi multi cas exploratori i explicatiu de tres organitzacions representatives del servici nacional de salut de Escòcia. S'ha utilitzat una combinació de mètodes empírics: entrevistes semi estructurades, enquestes (Model SAM) comparatives de mercat intersectorial i internacional basat en una revisió bibliogràfica i, finalment, una anàlisi qualitativa dels indicadors de progrés eSalut. Noranta dos participants han informat a través de tres estudis de casos. Els resultats s'han divulgat al llarg del període d'investigació en un compendi de publicacions rellevants que conformen la tesi. Els resultats assenyalen que la governança de la eSalut està en la seua infància en tots els sectors i països. 80% de les organitzacions de tot el món es troben en un punt de transició entre un procés "compromès" i "establint". Els nostres resultats apunten que quan més madur es la governança de la eSalut, millor serà l'alineació estratègica entre la eSalut i les organitzacions d'atenció sanitària (HCOs), per tant el millor progrés de la sanitat electrònica a la Societat Digital. L'alineació estratègica està madurant lentament en les organitzacions (15% des de 2008); aquest desenvolupament és més ràpid que el progrés de la societat digital (Escòcia). L'estratègia Nacional de eSalut mostra signes de progrés constant i l'absorció de la eSalut en la societat es prou positiva, amb un creixement global del 12% des de l'any 2008, tot i la profunda recessió econòmica durant el període de temps d'aquesta investigació. Les conclusions d'aquest estudi com una anàlisi longitudinal són limitades i es requereix més investigació en els propers anys. / Beratarbide Sobrado, ME. (2016). Longitudinal analysis of eHealth Governance within healthcare organizations as a critical factor in the adaptation to the Information Society in Scotland [Tesis doctoral no publicada]. Universitat Politècnica de València. https://doi.org/10.4995/Thesis/10251/63456 / TESIS

Contemporary enterprises are largely dependent on Information Technology (IT), which makes decision making on IT matters important. There are numerous issues that confuse IT decision making, including contradictive business needs, financial constraints, lack of communication between business and IT stakeholders and difficulty in understanding the often heterogeneous and integrated IT systems. The discipline of IT governance aims at providing the decision making structures, processes, and relational mechanisms, needed in order for IT to support and perpetuate the business. The adjacent discipline of enterprise architecture provides a broad range of frameworks and tools for model-based management of IT. Enterprise architecture is a commonly and successfully used approach, but the frameworks need to be adapted with respect to the concerns at stake in order to become truly useful. The IT organization includes all people involved in decision making regarding IT. The quality of the IT organization differs between enterprises and depends on aspects such as: are rights and responsibilities assigned to the appropriate people, are formalized processes implemented, and does proper documentation exist? This internal IT organization efficiency is labeled IT governance maturity. One might argue that internal efficiency metrics of the IT organization are of moderate interest only. What really matters is the external effectiveness of services that the IT organization delivers to the business. This latter effectiveness is labeled IT governance performance. Even though it is reasonable to believe that enterprises with good IT governance maturity also achieve high IT governance performance, the validity of this assumption has never been tested. IT management’s ability to make well-informed decisions regarding internal IT organization matters would increase if it were possible to predict IT governance performance. The contribution of this thesis is a method for model-based IT governance decision making. The method includes a metamodel, i.e. a modeling language, and a framework for the assessment of IT governance maturity and performance. The method also allows prediction of IT governance performance.  This thesis is a composite thesis consisting of four papers and an introduction. Paper A presents an overview of the method for model-based IT governance decision making. Paper B presents the mathematical foundation of the prediction apparatus, i.e. a Bayesian network that is based on statistical data. Paper C presents how the method can be used in practice to support IT governance decision making. Finally, Paper D analyzes the correlation of IT governance maturity and performance. The analysis is based on statistical data from case studies in 35 organizations. / QC 20100909

No description available.

Thesis (MAcc)--University of Stellenbosch, 2009. / ENGLISH ABSTRACT: Due to the integration of IT into all aspects of modern-day businesses, it is vital that the risks associated with IT are governed as an integral element of enterprise-wide corporate governance. The Third King Report on Corporate Governance (King III) was issued by the South African Chapter of the Institute of Directors in September 2009 and becomes operational on 1 March 2010. This marks the first time that the King Report has specifically addressed IT governance. King III will apply to all corporate entities. Such entities could benefit from applying an IT governance framework to ensure that they adequately address all aspects of IT governance, as required by King III. One of the comprehensive frameworks available is COBIT (Control Objectives for Information and Related Technology) issued by ISACA (previously known as the Information Systems Audit and Control Association). King III mentions the fact that COBIT could be used to assess and implement IT governance within an entity. The aim of this research is to determine whether the use of COBIT ensures compliance with King III’s requirements relating to IT governance. It was found that the main requirements in King III relating to IT governance and the processes of COBIT are well aligned, and, as a result, COBIT could be used effectively to ensure compliance with King III in relation to IT governance. However, an entity would still have to pay attention to certain King III-specific requirements. Furthermore, it was found that the application of the principles in COBIT could further strengthen the IT governance of an entity, as COBIT also addresses the more detailed activities, such as the implementation and operation of the IT system, which is not specifically addressed by King III.

The alignment of information systems (IS) strategies with business strategies has been a managerial priority in modern organisations. Information Technology (IT) governance is an alternative perspective that has recently been used as a management solution that can drive to desired levels of IS/business alignment. From a pragmatic perspective, both IS/business alignment and IT governance appear to be managerial solutions that corporations desire to implement in order to get the most of the business and IT relationship. Empirical research has addressed the idea that effective designs of IT governance enable IS/business alignment, however, the extent of such impact and related interactions are still unclear. This research is focused on those claims to contribute with pragmatic solutions towards IS/business alignment and IT governance by means of collective management practices. This research explored challenges, assumptions and conceptualisations around IS/business alignment and focused on the assessment process of IS-business alignment to identify management practices for both IS/business alignment and IT governance. First, a quantitative analysis from data collected of an international survey was performed. This survey was conducted to identify extreme outcomes of relevant management practices in the IS/business alignment dynamics and links with IT governance. Second, a qualitative analysis from data collected of two leading large companies, one in the manufacturing and other in the financial sector, was performed by using a three-level (strategic, tactical and operational) assessment method. This case research aimed to identify how common relevant management practices interact across strategic, tactical and operational organisational levels. Results of both analyses were integrated to elaborate the constructors of the framework derived from this research, namely ALIS-G. The results from this research can be summarised as follows: First, ALIS-G exhibits four core management practices (IT investment management, budgetary control, strategic and tactical program management, strategic and tactical understanding of IT-business) and four supportive (IT-business planning, IT projects prioritisation, sponsorship & championship and change readiness) to show collective and compelling influence over the IS-business alignment dynamics and the effectiveness of IT governance arrangements. Second, a well-established IT investment management process holds the most substantial positive impact in the IS-business alignment dynamics and design of IT governance arrangements. Finally, results highlights the fact, perhaps obvious, that the arrangement of IT governance and the dynamics of IS/business alignment are very much conditioned by the resilient assignment, allocation and administration of budgets

The current research is concerned with exploring the quality of information technology (IT) control over financial reporting systems as reported under Section 404 of the Sarbanes-Oxley Act of 2002. More specifically, this dissertation examines the association between organizational governance mechanisms and the occurrence and subsequent disclosure of IT control weaknesses. Despite the adverse impact of IT control weaknesses on internal control quality and financial reporting reliability, research on IT controls in general and IT control weaknesses in particular remains largely anecdotal with limited reliance on theory. The current work proposes and tests an integrated theoretical model of the antecedents of IT control weaknesses. The proposed model draws upon agency theory to provide a theoretical perspective of the occurrence of IT control weaknesses and upon corporate governance literature to solicit potential factors that influence the achievement of effective IT control over financial reporting. Drawing upon agency theory, this research views the existence of IT control weaknesses as a manifestation of an agency problem caused by information asymmetry and lack of alignment between the overall organization represented by its board of directors as a principal and its information systems (IS) organization represented by the top IS team as an agent. Drawing on corporate governance literature, this dissertation proposes two categories of governance and contracting mechanisms that the board of directors can employ to reduce information asymmetry and align the interests of the top IS team with those of the firm thereby reducing the agency problem. These categories are: IT governance mechanisms and IT executive incentive alignment mechanisms. The IT governance mechanisms involve two elements: first, the IT background element which includes (a) the IT background of the board of directors as reflected by two of its main committees, namely the corporate governance committee and the audit committee and (b) the IT background of the top management team; second, the IT executive element as reflected in terms of the structural and the expert power of the Chief Information Officer (CIO). The IT executive incentive alignment mechanisms include two elements: (a) the CIO’s absolute compensation level and (b) the pay disparity between the CIO and other members of the top management team. A research model integrating these elements is developed and tested with empirical data. For testing the proposed model, this dissertation uses a sample of firms with IT control weaknesses and a control group of similar firms with no IT control weaknesses for the years 2005-2009. Empirical results provide support for five of the seven hypotheses put forth in this research. Regarding the IT governance mechanisms, study findings indicate that a lower likelihood of disclosing IT-related control weaknesses is associated with having audit committee and corporate governance committee members with IT expertise. Furthermore, the study findings provide support for the contention that the goal congruence is contingent on the CIO’s power. To this end, the study finds that a lower likelihood of disclosing IT-related control weaknesses is associated with having CIOs with higher levels of structural and expert power. As for the incentive alignment mechanisms, empirical results provide support for the assertion that goal congruence is contingent on perceived pay equality between the CIO and other members of the top management team. The results indicate that the lower the pay disparity between IT executives and business executives in the top management team, the lower the likelihood of disclosing IT control weaknesses. The present study contributes to the current body of knowledge of literature in several ways. It is the first study to propose and test an integrated model of the antecedents of IT control weaknesses. The proposed model adds to the current literature by introducing agency theory as a theoretical basis of the antecedents of IT control weaknesses. Furthermore, this study adds to the current literature by introducing and providing empirical evidence linking the IT background of the corporate governance committee, the structural power and expert power of the CIO, and the CIO relative pay to the disclosure of IT control weaknesses over financial reporting. Lastly, this research contributes to practice by offering a much needed understanding for managers, directors, auditors, and regulators in their effort to improve the quality of IT control and the reliability of financial reporting.

A Governança de TI (GTI) tem um papel fundamental na realização do alinhamento da TI com o negócio das organizações, potencializando os processos de TI juntamente com os objetivos do negócio. Alinhar a TI ao negócio da organização é fundamental, porém é necessário também garantir o alinhamento da GTI com a Governança de Dados (GD). A GD é responsável pelo controle e gestão dos dados da organização, possibilitando a transformação de dados em informações para a tomada de decisões estratégicas. Possuir uma GTI alinhada a GD propicia um melhor desempenho para as organizações, que precisam de informações corretas em tempo hábil para a tomada de decisões. Para colaborar com este alinhamento existem os frameworks de boas práticas de gestão, que auxiliam as organizações a implantar esta governança. Este trabalho teve como objetivo identificar os processos e frameworks de GD implantados em organizações brasileiras e comparar os benefícios obtidos na implantação com os propostos pela literatura. O trabalho exploratório e qualitativo proporcionou a realização de estudos de casos em três organizações brasileiras de grande porte que implantaram ou estão em processo de implantação dos processos de GD. Os estudos de casos foram realizados com duas visões diferentes: a consultoria que implantou a GD e a organização que contratou a consultoria. A coleta de dados foi realizada por meio de entrevistas e técnicas de análise de conteúdo foram aplicadas nos dados coletados. Como resultado identificou-se que para as organizações estudadas o nível de implantação dos processos de GD foi médio, entretanto o grau de obtenção dos benefícios foi alto. Isso ocorre devido à carência de GD que se encontram as organizações estudadas, bem como a grande melhoria e benefícios identificados pelos entrevistados, mesmo com uma implantação parcial da GD. / The IT Governance (ITG) has a key role in achieving the IT alignment with the business organization, empowering IT processes with business goals. Align IT with business organization is crucial, however it is also necessary to ensure the alignment of the GTI with Data Governance (DG) The DG is responsible for the control and management the organization\'s data, enabling the transformation of data into information for strategic decisions making. Have aligned DG with ITG is a better performance for organizations that need the right information in the right time for decision making. To collaborate with this alignment are the frameworks of good management practices that enable organizations implement this governance. This study aimed to identify the processes and frameworks of DG implemented in Brazilian organizations and compare the benefits achieved in the implementation with the proposed in the literature. The exploratory and qualitative study provided the realizations of case studies in three large Brazilian organizations that have implemented or are in the implementation DG process. The case studies were performed with two different views: a consultancy that implemented the DG and the organization that hired the consultancy. Data collection was conducted through interviews and content analysis techniques were applied in the data collected. As a result it was found that for organizations studied the implementation DG level was average, however the benefits degree was high. This is due to lack in DG in the organizations studied and the great improvement and benefits identified by interviewers even though with partial implementation DG.