<p>This thesis is written about IT Governance and Management, a phenomenon which can result in higher efficiency and stronger competition for the organization or enterprise in mind. By implementing good IT Governance and Management, IT can support business goals and optimize investments in IT while at the same time IT manages risks and opportunities.</p><p>The main case study is done at County Administrative Board of Kronoberg where Kronoberg County is counted as one of the smaller counties in Sweden. The County Administrative Board of Kronoberg has an awareness of the importance of good and effective IT Governance and Management even though there is room for improvement.</p>

This paper seeks to tackle the current confusion about the constituent dimensions of IT Governance (ITG) and inconsistent operationalisation approaches inhibiting advances in research and organisational ITG practice. Through a structured literature review of ranked high-quality publications augmented by a meta-case study with five underlying projects, we find nine distinct dimensions of ITG. The input-oriented dimensions Compliance Management, IT Investment Management and ITG Improvement have received little attention in earlier conceptualisations, while the more output-oriented dimensions Business/IT Alignment and Business Value Delivery have featured more often in related studies. Scope and application of ITG may depend on the organisational context and the intentional use, such as regulatory or strategic. Depending on the context, more research seems to be warranted to develop context-dependent measurement constructs of ITG that can be compared over studies. (author's abstract)

企業應隨著資訊科技進步，必須跟上資訊科技改變服務策略的趨勢，更要知道如何善用資訊科技，成為自身的優勢，才能在一波波新的科技浪潮中免於被吞噬的命運。 本研究對於資訊治理相關ITIL與ISO/IEC 20000進行相關文獻的探討蒐集，歸納過去研究的重點，並對於ISO於2011年發行新版ISO/IEC 20000:2011驗證，企業或組織面臨版本轉換的考驗做一探討，整理企業應透過哪些步驟修改才能夠符合改版後的ISO/IEC 20000:2011。 研究透過相關文獻與統計資料了解目前ITIL與ISO/IEC 20000的現況與台灣企業目前通過驗證的狀況，對於其版本差異進行分析研究，提出企業轉版規劃建議，並以實際個案公司(證券業)為例，對於如何調整規劃以轉換至2011版本提供一個具體可行方案。 企業從ISO/IEC 20000:2005轉換到ISO/IEC 20000:2011，因為已有舊版導入經驗，所以取得新版驗證不算困難，但是取得ISO/IEC 20000:2011驗證的組織，並非一定能讓資訊服務與業務策略緊密結合，因為ISO/IEC 20000:2011新版條文，對於服務策略部分，並沒有ITIL V3的策略發想、服務組合管理及需求管理等服務策略管理流程要求。 通過 ISO/IEC 20000:2011，必須先建立ITIL V3與ISO/IEC 20000:2011對應的管理流程，再以ISO/IEC 20000:2011為檢核方式作為組織提供資訊服務的能力與效度之驗證，最後參考ITIL V3新增的管理流程及資訊功能，補強ISO/IEC:20000:2011不足之處，才能夠由業務策略出發結合服務流程運用資訊科技提昇組織整體對外競爭力。 由於資訊科技日新月異，建議已經通過ISO/IEC 20000:2011的組織，應隨時關注ITIL版本更新，參考新增的部分強化管理流程，以彌補資訊科技演進快速，管理跟不上腳步的困境；企業不應只以取得 ISO/IEC 20000:2011驗證自滿，對於新資訊科技改變服務流程也應建立管理評估標準，以PDCA的方法論持續改善，達到真正資訊治理的目標。 / It is necessary for corporations to follow the progress of information technology, to catch up with the changing trends service strategies, and to transform the information technology to become their advantages so that they will be saved from the fate of being devoured by the continuous new waves of technology. This research includes providing literature review with respect to information governance targeting on Information Technology Infrastructure Library (ITIL) and ISO/IEC 20000, summarizing previous research works, studying the challenges that the corporations or organizations facing when moving to the new edition of ISO/IEC 20000:2011, and analyzing the steps that the corporations should take in order to be certified under the new edition. This research surveys the current conditions of the certified companies in Taiwan under ITIL and ISO/IEC 20000 based on related literatures and statistical data. The research further analyzes the differences between editions and proposes a moving plan to the new edition. The moving plan is illustrated in a case study in securities industry with a tangible and executable solution of adjustment planning. It is not difficult for corporations to move from ISO/IEC 20000:2005 to ISO/IEC 20000:2011 because of the experiences of introducing prior edition into the organizations. However, for organizations that pass the certification of ISO/IEC 20000:2011, it is not always the case to integrate information services and business model tightly. The problem occurs because there are no specific requirements documented in the new edition regarding service strategy management processes such as strategy generation, service portfolio management, and demand management specified in ITIL V3. In order to be certified by ISO/IEC 20000:2011, the corporations first have to establish corresponding management processes between ITIL V3 and ISO/IEC 20000:2011. Secondly, the corporations have to verify the capability and effectiveness of providing information services within the organizations by using the ISO/IEC 20000:2011 as an auditing tool. Lastly, the corporations have to reinforce the missing part of the ISO/IEC 20000:2011 by considering the newly added management process and information functions in ITIL V3 and integrate service process from business model. Thus can promote competitive strength across the organizations This research suggests that in order to catch up the fast pace of the technology evolution and to manage the situation of falling behind, the certified organizations should pay attention to the updates of ITIL, and consider the new additions to strengthen management processes. The corporations should not be only satisfied on passing the certification of ISO/IEC 20000:2011 but also to establish management evaluation standards for the changing service processes caused by new information technology. The corporations also should keep improving according to the PDCA methodology in order to reach the goal of real IT governance.

Submitted by Tatiana Lima (tatianasl@ufba.br) on 2017-02-07T18:17:08Z No. of bitstreams: 1 Araújo, Anderson Igor Ferreira.pdf: 2868755 bytes, checksum: 2f1862dd8b570e138322fe8915aff0ed (MD5) / Approved for entry into archive by Tatiana Lima (tatianasl@ufba.br) on 2017-02-07T18:28:18Z (GMT) No. of bitstreams: 1 Araújo, Anderson Igor Ferreira.pdf: 2868755 bytes, checksum: 2f1862dd8b570e138322fe8915aff0ed (MD5) / Made available in DSpace on 2017-02-07T18:28:18Z (GMT). No. of bitstreams: 1 Araújo, Anderson Igor Ferreira.pdf: 2868755 bytes, checksum: 2f1862dd8b570e138322fe8915aff0ed (MD5) / Verifica-se, cada vez mais, a dependência das organizações públicas em relação aos serviços de Tecnologia da Informação para satisfazer seus objetivos corporativos e atender às necessi-dades estratégicas. Desta forma, o presente estudo foi motivado pela necessidade da Secreta-ria de Tecnologia da Informação da Universidade Federal do Vale do São Francisco de pro-mover o uso adequado dos recursos de Tecnologia da Informação e a melhoria da qualidade dos serviços de Tecnologia da Informação entregues ao seu público alvo por meio de proces-sos de gestão estruturados. Objetivou-se, portanto, avaliar os níveis de maturidade dos proces-sos de gestão de serviços de Tecnologia da Informação dessa universidade e propor interven-ções de modo que as boas práticas do ITIL pudessem ser implantadas. Tratou-se de uma pes-quisa qualitativa de natureza exploratória, na qual elegeu-se o método de estudo de caso. Fo-ram recolhidas informações por meio de pesquisa documental, questionários e observações visando à triangulação dos dados. A metodologia utilizada teve como base a biblioteca ITIL, a partir da qual foram selecionados cinco processos: Gerenciamento de Configuração e de Ati-vo de Serviço; Gerenciamento de Mudança; Gerenciamento de Liberação e Implantação; Ge-renciamento de Incidente e Gerenciamento de Problema, os quais se submeteram ao Modelo de Maturidade PMF. Os cinco processos avaliados foram qualificados no estágio Inicial ou Ad Hoc de maturidade, onde o processo é reconhecido, contudo existe pouca ou nenhuma atividade dentro da sua finalidade. Além disso, não é beneficiado com alocação de recursos nem orçamento. Desta forma, foi possível identificar problemas e/ou oportunidades de melho-rias. Por fim, foi elaborado um plano de ação no intuito de elevar o nível de maturidade desses processos. / There is, increasingly, dependence of public organizations in relation to Information Technology services to satisfy their corporate aims and strategic needs. Therefore, this study was motivated by necessity of Information Technology Secretariat of the Universidade Feder-al do Vale do São Francisco to promote the appropriate use of information technology re-sources and improving quality of information technology services provided to its public through structured management processes. The objective is, measure the maturity level of information technology service management processes of this university and propose inter-ventions to apply ITIL practices. It was a qualitative research of exploratory nature, where has chosen the method of case study. Information was collected through research, questionnaires and observations aimed data triangulation. The methodology used was based on ITIL library, where it was selected five processes: Service Asset and Configuration Management; Change Management; Release and Deployment Management; Incident Management and Problem Management, which they underwent to PMF Maturity Model. The five cases were qualified in the initial stage of maturity, where the process is recognized, however there is a little or nor activity within its purpose. Moreover, it is not benefited from allocating resources or budget. Thus, it was possible to identify problems and / or opportunities for improvement. Finally, it designed a action plan in order to raise the level of maturity of these processes.

Considerando a importância da TI no ambiente de negócios e os riscos inerentes ao emprego dessa tecnologia, este estudo visa buscar evidências de melhoria de desempenho de empresas com a realização de gerenciamento de riscos de TI (GRTI). A pesquisa em curso seguiu a metodologia da Hipótese de Eficiência de Mercado, na sua forma semiforte, isto é, utilizando o método de janela de eventos. Com essa metodologia estimaram-se os retornos anormais na valorização das ações de empresas, oriundos da publicação de eventos de GRTI pelas empresas de capital aberto brasileiras, obtidos a partir do site da BMF&BOVESPA. Foram analisadas todas as empresas listadas em todo o período disponível no site, isto é, de 2003 até 2016, perfazendo um total aproximado de 400 empresas em cada ano. Essa análise utilizou ferramentas de busca do próprio site para encontrar anualmente todos os documentos que contivessem menção à palavra risco. Todos os documentos públicos obtidos com essa filtragem foram examinados detalhadamente para identificar evidências de que a empresa realizou, pela primeira vez, ações de GRTI, isto é, de que a empresa anunciou ao mercado que o GRTI passou a fazer parte de suas rotinas operacionais e administrativas. Depois dessa análise pormenorizada de todos os documentos publicados por essas empresas no site da BMF&BOVESPA, chegou-se a 22 empresas que evidenciaram ao mercado que fazem GRTI. Essas 22 empresas foram examinadas à luz da metodologia de janela de eventos. Os resultados obtidos indicam que, no cenário brasileiro, não é possível afirmar que o GRTI traz uma melhora no desempenho financeiro das empresas, uma vez que a hipótese nula de alteração do valor do retorno das ações não foi invalidada. Infere-se que o mercado não percebe uma diferença de valor nas ações dessas empresas, em função dos eventos de GRTI. Com intuito de suportar teoricamente esta pesquisa, foram reunidas as principais pesquisas em governança de TI e GRTI e relacionando-as a um desempenho financeiro empresarial. / Considering the importance of IT in the business environment and the risks inherent in the use of this technology, this study aims to seek evidence of improved performance of companies with IT Risk Management (ITRM). The research followed the methodology of the Market Efficiency Hypothesis, in its semi-strong-form, that is, using the event window method. This methodology was used to estimate the abnormal returns on the valuation of companies' shares, resulting from the publication of ITRM events by Brazilian publicly traded companies, obtained from the BMF&BOVESPA website. All listed companies were analyzed throughout the period available on the site, that is, from 2003 to 2016, approximately 400 companies in each year. This analysis used search tools from the site itself to find annually all documents that contained mention to the word risk. All public documents obtained by this filtering were examined in detail to identify evidence that the company held, for the first time, ITRM actions. That is, the company announced that ITRM became part of their administrative and operational routines. After this detailed analysis of all documents published by these companies from Brazilian stock exchange, 22 companies evidenced to the market that do ITRM. These 22 companies were examined under the event window methodology. The results indicate that, in the Brazilian scenario, it is not possible to affirm that the ITRM brings an improvement in companies’ financial performance, since the null hypothesis of change shares’ return values was not negated. It is inferred that the market does not notice a difference in these companies’ share values due to ITRM events. In order to theoretically support this research, the main studies in IT governance and ITRM were gathered and related to a business financial performance.

Made available in DSpace on 2014-12-17T13:53:23Z (GMT). No. of bitstreams: 1 GilsonGS.pdf: 830344 bytes, checksum: 6d6f4ca1fa516855f3cb714d653d4728 (MD5) Previous issue date: 2009-11-06 / Universidade Federal do Rio Grande do Norte / This study aims to understand the general model of governance of information technology adopted by telecommunication companies operating in Rio Grande do Norte. The research methodology used involved a theoretical and empirical approach prepared, involving two case studies on companies in the telecommunications industry working in the state of Rio Grande do Norte. The study covered the area of IT organizations, through interviews with managers responsible for the area of Telecommunications / IT. To study in accordance with the approach and address the problem of research, this study was based on qualitative criteria, which enabled the understanding of how companies adopt the governance of information technology. In conclusion, it was found that the governance practices of information technology employees are incipient, but that meet the needs of business and that they intend to implement in specific areas and use other practices of IT governance / O presente trabalho tem como objetivo geral compreender o modelo de governan?a de tecnologia da informa??o adotado por empresas de telecomunica??es que atuam no Rio Grande do Norte. A metodologia da pesquisa utilizada envolveu um levantamento te?rico e emp?rico da abordagem disposta, envolvendo dois estudos de casos em empresas do setor de telecomunica??es que atuam no estado do Rio Grande do Norte. O estudo abrangeu a ?rea de TI das organiza??es, atrav?s de entrevista com os gerentes respons?veis pela ?rea de Telecomunica??es/TI. Para estudar de acordo com a abordagem proposta e responder ao problema da pesquisa, este estudo utilizou-se de crit?rios qualitativos, que viabilizou a compreens?o acerca de como as empresas adotam a governan?a de tecnologia da informa??o. Como conclus?o, foi visto que as pr?ticas de governan?a de tecnologia da informa??o empregadas s?o incipientes, mas que atendem ?s necessidades do neg?cio e que as mesmas pretendem implementar em usos e ?reas espec?ficas outras pr?ticas de governan?a de TI

Considerando a importância da TI no ambiente de negócios e os riscos inerentes ao emprego dessa tecnologia, este estudo visa buscar evidências de melhoria de desempenho de empresas com a realização de gerenciamento de riscos de TI (GRTI). A pesquisa em curso seguiu a metodologia da Hipótese de Eficiência de Mercado, na sua forma semiforte, isto é, utilizando o método de janela de eventos. Com essa metodologia estimaram-se os retornos anormais na valorização das ações de empresas, oriundos da publicação de eventos de GRTI pelas empresas de capital aberto brasileiras, obtidos a partir do site da BMF&BOVESPA. Foram analisadas todas as empresas listadas em todo o período disponível no site, isto é, de 2003 até 2016, perfazendo um total aproximado de 400 empresas em cada ano. Essa análise utilizou ferramentas de busca do próprio site para encontrar anualmente todos os documentos que contivessem menção à palavra risco. Todos os documentos públicos obtidos com essa filtragem foram examinados detalhadamente para identificar evidências de que a empresa realizou, pela primeira vez, ações de GRTI, isto é, de que a empresa anunciou ao mercado que o GRTI passou a fazer parte de suas rotinas operacionais e administrativas. Depois dessa análise pormenorizada de todos os documentos publicados por essas empresas no site da BMF&BOVESPA, chegou-se a 22 empresas que evidenciaram ao mercado que fazem GRTI. Essas 22 empresas foram examinadas à luz da metodologia de janela de eventos. Os resultados obtidos indicam que, no cenário brasileiro, não é possível afirmar que o GRTI traz uma melhora no desempenho financeiro das empresas, uma vez que a hipótese nula de alteração do valor do retorno das ações não foi invalidada. Infere-se que o mercado não percebe uma diferença de valor nas ações dessas empresas, em função dos eventos de GRTI. Com intuito de suportar teoricamente esta pesquisa, foram reunidas as principais pesquisas em governança de TI e GRTI e relacionando-as a um desempenho financeiro empresarial. / Considering the importance of IT in the business environment and the risks inherent in the use of this technology, this study aims to seek evidence of improved performance of companies with IT Risk Management (ITRM). The research followed the methodology of the Market Efficiency Hypothesis, in its semi-strong-form, that is, using the event window method. This methodology was used to estimate the abnormal returns on the valuation of companies' shares, resulting from the publication of ITRM events by Brazilian publicly traded companies, obtained from the BMF&BOVESPA website. All listed companies were analyzed throughout the period available on the site, that is, from 2003 to 2016, approximately 400 companies in each year. This analysis used search tools from the site itself to find annually all documents that contained mention to the word risk. All public documents obtained by this filtering were examined in detail to identify evidence that the company held, for the first time, ITRM actions. That is, the company announced that ITRM became part of their administrative and operational routines. After this detailed analysis of all documents published by these companies from Brazilian stock exchange, 22 companies evidenced to the market that do ITRM. These 22 companies were examined under the event window methodology. The results indicate that, in the Brazilian scenario, it is not possible to affirm that the ITRM brings an improvement in companies’ financial performance, since the null hypothesis of change shares’ return values was not negated. It is inferred that the market does not notice a difference in these companies’ share values due to ITRM events. In order to theoretically support this research, the main studies in IT governance and ITRM were gathered and related to a business financial performance.

O objetivo deste trabalho é pesquisar os gastos em Tecnologias da Informação e Comunicação (TIC) do Governo do Estado de São Paulo e das Secretarias do Estado de Educação e da Saúde, e compará-las internamente e externamente com outras entidades. O capítulo 1 contextualiza a problemática da pesquisa enquanto o capítulo 2 traça os objetivos gerais e específicos. O capítulo 3 apresenta uma revisão bibliográfica sobre Administração Pública, TIC, o uso de TIC na Administração Pública, Administração Pública no Brasil, estrutura do Estado de São Paulo e das secretarias estudadas, descrição dos sistemas contábilfinanceiros SIAFEM e SIGEO, conceitos de orçamento público do Estado de São Paulo e as variáveis e indicadores utilizados na pesquisa. No capítulo 4 encontram-se os métodos e procedimentos utilizados na pesquisa, identificando as contas contábeis utilizadas no estudo, a relação dos gestores entrevistados, a forma de análise e apresentação dos resultados. No capítulo 5 se demonstrou os resultados obtidos, no capítulo 6 a análise comparativa e conclusões, e no capítulo 7 encontram-se as considerações finais. / The objective of this work is to study the expenses on Information and Communication Technologies (ICT) of the State of São Paulo, the Department of Education and the Department of Health, compare each other and with other departments. Chapter 1 gives an overview of the research context while chapter 2 presents the main objectives. Chapter 3 presents a review on Public Administration, ICT, the use o ICT in the Public Administration, Public Administration in Brazil, the structure of the State of São Paulo and the departments studied, a description of SIAFEM and SIGEO financialaccountancy systems, state´s public budget concepts, and variables and indicators used in the study. On Chapter 4, the methods and procceedings of the study, presenting the accounts used, managers interviewed and the analysis structure. Chapter 5 demonstrates the results of the study, chapter 6 the comparative analysis and chapter 7 presents the final remarks.

Gradually, the physical and geographically restricted marketplace is eroding and giving room to a more vibrant and competitive virtual marketplace – J.F Rayport and J.J Sviokla referred to it as the ―marketspace‖ (J.F. Payport, 1995). Technological advancement is the causative agent of this rapid change. As customers become increasingly complex and find sustained satisfaction in the marketspace, pressure keeps mounting on enterprises to adjust and seek suitable dance to the new rhythm. More prepared enterprises like e-bay and FEDEX have taken advantage of this rapid change to emerge competitive in the marketspace whist others dawdle behind. Enterprises especially in developing economies like Ghana, are increasingly investing enterprise resources in IT infrastructure, and accompanying applications and services to take advantage of the new marketplace and emerge competitive nationally and perhaps, in the process, gain global competitiveness. Are firms having strategic frameworks that guide these investments? And what are the factors that influence the adoption of these frameworks? Are there enabling national and firm level mechanisms to support IT investments? These are the questions that the research seeks to respond to. The research discovered Ghana’s strategic initiatives aimed at providing enabling infrastructure, regulatory and business environment to support the adoption of ICTs into public and civil service, and to also promote the performance and competitiveness of its industries and firms. At firm level, the research investigated the factors that influence the adaptation and effective implementation of IT Governance frameworks in enterprises. The research found education, external business environment, and extent of IT investment, statistically significant in driving IT process and governance framework adoption. It was therefore, recommended that regulatory institutions, educational institutions, market players and managers of firms contribute to the enhancement of these predictor variables to further improve ICT, IT process and IT governance framework adoption in Ghana. It was also recommended that later research should be undertaken to re-evaluate the performance and progress made by Ghanaian firms, and to possibly discover other drivers of ICT, ITprocess and IT governance framework adoption. / IT Process and Governance framework adoption in Ghana is relatively new. The research identifies Education, Level of IT investment and the Business Environment to be the most influential factors in promoting IT process and governance framework adoption in Ghana. / +233-246655744 / +233 - 201111216

With many research available on IT governance, this research differs from most of them due to its delimitation. The focus of this research lies in the two domains of value creation and performance measurement. Furthermore, the area of research has been small and medium Enterprises located in the area of Småland, Sweden. Brisebois, Boyd &amp; Shadid (2001) gave us the following definition of IT governance: “How those persons entrusted with governance of an entity will consider IT in their supervision, monitoring, control, and direction of the entity. How IT is applied will have an immense impact on whether the entity will attain its vision, mission, or strategic goal.” An objective of IT governance is to align the IT resources of an enterprise in a way that it fast-tracks the business priorities of the enterprise and assures that the investments in IT generates business value and that the IT is performing to its expectations. The research questions and the outcome of this research paper sheds light on the challenges of both value creation and performance measurement within the SMEs, but it also showcases what the driving forces of IT value creation are and which benefits arise from measuring the IT performance within the SMEs. Through semi-structured interviews with four SMEs, based in the region of Småland, numerous amounts of challenges and driving forces for IT value creation and challenges and benefits to measuring IT performance have been extracted. Based on the extracted information from the interviews, an analysis and a conclusion have been formed by the authors. In the end, the authors provide their thoughts for suggestions for further work and how all of this contributes to the field of Informatics.