Made available in DSpace on 2016-04-04T18:31:18Z (GMT). No. of bitstreams: 1 Poncinelli_Final_revisada22052007-3.pdf: 2496152 bytes, checksum: 2e7cfb0d28420c6b16ef51f9ebff00d5 (MD5) Previous issue date: 2007-04-27 / Research for the development of a process-mapping model based on control patterns to manage information technology. There is a trend for organizations to try and have their management processes under control; however, choosing, implementing and using the models which would best adapt to their reality are not easy tasks. This paper proposes the development of an information technology Management process using the systems study method named Sistemografia in order to meet the demands of the Sarbanes-Oxley law. This process is based on a model of control by objective, named Control Objectives for Information and related Technology (COBIT). All of these factors are embedded in companies that manage their technologies, especially telecommunications companies related to tele-information technology and to the multi-service nets. In short, the objectives are: to describe the elements that compose Company Management and Architecture; to describe the articles of the Sarbanes-Oxley law, relating them to the COBIT model; to describe the management model using the sistemografia method; and to propose a framework for data management and metadata for the Management of IT, associating a dashboard, and based on the maturity of the processes, so as to measure them at their present stage and plan the aimed strategic stage. / Pesquisa para desenvolvimento de um modelo para mapeamento de processos baseado em controles para a governan?a de tecnologia da informa??o. As organiza??es t?m procurado cada vez mais, ter sob controle seus processos de governan?a, por?m, escolher, adotar e utilizar modelos que melhor se adaptem ?s sua realidade n?o ? tarefa f?cil. Este trabalho prop?e o desenvolvimento de um processo de Governan?a de Tecnologia da Informa??o utilizando o m?todo de estudo de sistemas, denominado Sistemografia para atender as determina??es da Lei Sarbanes-Oxley. Tal processo est? baseado em modelo de controles por objetivos, denominado Control Objectives for Information and related Technology (COBIT). Todos esses fatores est?o intrinsecamente presentes nas empresas que fa?am gest?o de suas tecnologias, principalmente empresas de telecomunica??es que est?o relacionadas com a teleinform?tica e as redes multi-servi?o. De forma espec?fica os objetivos s?o: descrever os elementos que comp?em as Governan?a e a Arquitetura Empresariais; descrever as Se??es da Lei Sarbanes- Oxley, relacionando-as com o modelo COBIT; descrever o processo para gest?o utilizando o m?todo de sistemografia; e propor uma moldura (framework) para a gest?o dos dados e metadados para Governan?a de TI, associando um painel de controle (dashboard), baseado na maturidade dos processos, de maneira a medilos em seu estado atual e projetar o est?gio estrat?gico desejado.

Submitted by Vanessa Nunes (vnunes@unisinos.br) on 2015-03-16T17:56:17Z No. of bitstreams: 1 00000168.pdf: 2075539 bytes, checksum: eab9bbacd914e68a9484f20c7cd84cd6 (MD5) / Made available in DSpace on 2015-03-16T17:56:17Z (GMT). No. of bitstreams: 1 00000168.pdf: 2075539 bytes, checksum: eab9bbacd914e68a9484f20c7cd84cd6 (MD5) Previous issue date: 2012 / Nenhuma / A Tecnologia da Informação (TI) geralmente se caracteriza por prover sustentação tecnológica à operação dos processos de negócio. Por este motivo, a TI tem de ser escalável, acompanhando o crescimento da organização e a busca constante por resultados positivos, na tentativa de assegurar uma gestão de TI eficiente. Nesse contexto se insere a Governança de Tecnologia da Informação (GTI), propondo uma estrutura de relações e processos que dirige e controla uma organização a fim de atingir seu objetivo de adicionar valor ao negócio, através do gerenciamento balanceado do risco com o retorno do investimento em TI. Na governança de TI o processo de Compliance (conformidade) torna os executivos responsáveis por estabelecer, avaliar e monitorar a eficácia dos controles internos das organizações. Este trabalho realizou uma pesquisa que verifica qual é a percepção do quanto o Compliance influencia as práticas de Governança de TI. Realiza do em um contexto das instituições de Serviços Sociais Autônomos (SSA), este tipo de organização é auditada e controlada por órgãos fiscalizadores federais, tais como Tribunal de Contas da União e Controladoria Geral da União, também auditada e controlada internamente pelo Conselho Fiscal. Esta fiscalização e controle ocorrem devido aos valores da receita compulsória que são arrecadados pelo governo federal. A referida fiscalização exige um Compliance para toda instituição, inclusive para a TI. O estudo de caso foi realizado de forma quantitativa, com uma população de 108 questionários eletrônicos enviados. Foram analisadas 78 respostas dos empregados dos Departamentos Regionais, distribuídos em todo o Brasil, que retornaram a pesquisa. A prática de governança de TI indicada por 92% dos respondentes como a que mais apoia o Compliance na Instituição, foi o Plano Diretor de Tecnologia da Informação (PDTI). Utilizou-se o teste estatístico não-paramétrico Kruskal-Wallis e o de Spearman para detectar diferenças significativas entre grupos da amostra com relação às questões das práticas de GTI. Os resultados obtidos levam a conclusão de que não há evidências estatisticamente significantes para aceitar que o Compliance influencie nas práticas de governança de TI na percepção dos empregados dentro da organização de Serviço Social Autônomo, objeto do estudo. / Information Technology (IT) is usually recognize by technological support, is fundamental to sustain what may be unglamorous and taken-for granted business operations. Due this reason, IT must be scalable with the growth organization and offers a means for increasing productivity. However, for ensure an effective IT management becomes complex. Information Technology Governance of (ITG), proposing a structure of relationships and processes that direct and control an organization to achieve its g oal of adding value to the business by managing risk balanced with the IT return on invest ment. In IT governance, Compliance process makes the executives responsible for establ ishing, evaluating and monitoring the effectiveness of internal organizations controls. T his paper makes a survey that checks the perception about the Compliance influence on IT Governance practices. Performed in a Brazilian organizations context, called Social Autonomous Service Organizations (SSA), this kind of organization is audited and controlled by federal oversight agencies, also internal audited and controlled by an Audit Committee. This control exists due the fact of compulsory contribution collected by the federal government. This requires a completed Compliance processes for organization, including IT. Case study was a quantitative way, with a statistic population of 108 sent electronic questionnaires. Responses analyzed from 78 employees of the Regional Departments in all Brazilian country survey answered. IT governance practice most indicated, with 92% answers, choose how as the most support Compliance process in organizations was the Plan for Information Technology (PDTI). Nonparametric statistical test Kruskal-Wallis and Spearmanρ has been used to detect significant statistical diferences between groups in the sample with respect to IT Governance practices. Results lead to conclusion that there no is significant statistical evidence to accept that Compliance influence on IT Governance practices, this is a perception fo r Social Autonomous Service Organizations employees.

Submitted by Silvana Teresinha Dornelles Studzinski (sstudzinski) on 2016-02-18T14:53:03Z No. of bitstreams: 1 Tiago Coser_.pdf: 1143518 bytes, checksum: 1ab49a0e3a1cd5b419cae7912e0ad87c (MD5) / Made available in DSpace on 2016-02-18T14:53:03Z (GMT). No. of bitstreams: 1 Tiago Coser_.pdf: 1143518 bytes, checksum: 1ab49a0e3a1cd5b419cae7912e0ad87c (MD5) Previous issue date: 2015-12-17 / CAPES - Coordenação de Aperfeiçoamento de Pessoal de Nível Superior / UNISINOS - Universidade do Vale do Rio dos Sinos / A problemática resultante da separação entre propriedade e controle do capital é direcionada, nesta pesquisa, para o nível operacional e considera o fundamento assimetria da informação. Este estudo analisou como a Governança de Tecnologia da Informação (GTI) pode contribuir para reduzir problemas de agência. A relação de agência foi delimitada entre diretores (principal) e gerentes (agente) das áreas Administrativa e Comercial. Trata-se de uma pesquisa descritiva, com abordagem qualitativa, desenvolvida por meio de um estudo de caso único em uma indústria sediada no estado do Rio Grande do Sul. Os principais resultados indicam que os problemas de agência não se limitam a informações e ações ocultas no ambiente pesquisado, mas, também, se devem a fragilidades nos recursos e fluxos de informações que suportam os processos de delegação e monitoramento de atividades entre diretores e gerentes. As principais contribuições da GTI para reduzir o problema de agência associam-se, prioritariamente, ao alinhamento entre a TI e os objetivos do negócio, nos processos de planejamento, construção, entrega e monitoramento de serviços de TI. Estas visando a padronizar processos de negócio e a reduzir a dependência humana nas etapas dos mesmos. / The resulting separation issues of ownership and control of capital is directed in this research to the operational level and considers the foundation asymmetry of information. This study examined how the Information Technology (IT) Governance can help reduce agency problems. The agency relationship was established between directors (principal) and managers (agent) of the Administrative and Commercial areas. It is a descriptive research with a qualitative approach, developed through a unique case study in an industry based in the state of Rio Grande do Sul. The main results indicate that agency problems are not limited to information and hidden actions the researched environment, but also are due to weaknesses in resources and information flows supporting the delegation process and monitoring activities among directors and managers. The main contributions of the IT governance to reduce the agency problem are associated primarily to the alignment between IT and business objectives in the planning, construction, delivery and monitoring of IT services. It seeks to standardize business processes and reduce human dependence on the steps of the same.

A Governança da Tecnologia da Informação tem atraído interesse crescente nas organizações e no meio acadêmico, refletindo a importância e a evolução da Tecnologia da Informação na sociedade moderna. Inspirada na Governança Corporativa, a Governança da Tecnologia da Informação relaciona-se com a qualidade das decisões e ambiciona assegurar que as expectativas para a Tecnologia da Informação sejam realizadas, viabilizando a medição do desempenho, a gestão dos recursos e o controle dos riscos. Frequentemente (e não adequadamente), a Governança da Tecnologia da Informação é considerada como um tipo especial de gestão, e alguns dos modelos conhecidos como referência para a Governança da Tecnologia da Informação são dedicados a aspectos operacionais. A Governança da Tecnologia da Informação extrapola modelos de referência ou estilos de gerenciamento e está relacionada com os assuntos mais estratégicos. Motivado pelas lacunas na delimitação dos escopos e das fronteiras entre a Governança e a Gestão da Tecnologia da Informação, este trabalho investiga os elementos diferenciadores entre estes temas. São analisadas as definições, os escopos e os modelos teóricos da Governança da Tecnologia da Informação. Alicerçada na revisão da literatura, é feita uma pesquisa qualitativa baseada nos estudos de casos de quatro empresas brasileiras com programas de Governança de Tecnologia da Informação implantados. / Information Technology Governance has gathering increasing interest both in organizations agenda and in academic research, reflecting the importance and evolution of Information Technology in society. Inspired by Corporate Governance, Information Technology Governance is related to the quality of decisions and aims to assure that expectations to Information Technology are achieved by performance measurement, resource management and risk control. This work is motivated by gaps in delimitating the borders between Information Technology Management and Information Technology Governance. Information Technology Governance is frequently (and not adequately) considered as a special class of Information Technology Management, and some Information Technology Governance models are indeed dedicated to operational aspects of Information Technology. Information Technology Governance is in fact more than reference models or a management style, dealing with more strategic issues in IT agenda. This research project aims to investigate differences between Information Technology Governance and Information Technology Management, by means of analyzing the scope and the reference models of Information Technology Governance. Based on a literature review, a qualitative research using case study is conducted in the context of four Brazilian companies with implemented Information Technology Governance programs.

A governança da Tecnologia de Informações é um tema tradicional e importante para a pesquisa e a prática da administração de organizações. Modelos teóricos e metodologias padronizadas são largamente empregadas e com sucesso em organizações com estrutura tradicional hierárquica. Entretanto, a sua aplicação em estruturas de negócios mais descentralizadas e horizontais, encontra limites devido às suas características próprias de gestão, processos e relacionamento entre seus componentes e ecossistemas, as quais não são suficientemente contempladas nas metodologias mencionadas. Por meio da análise comparativa dos modelos teóricos disponíveis e de estudos de casos reais de ecossistemas de organizações em rede, plataformas, meta-organizações e arranjos mais informais, esta pesquisa procura identificar as novas dimensões requeridas para a governança efetiva da Tecnologia de Informação nestas classes de organizações e propor diretrizes para a complementação das metodologias. / The governance of Information Technology is a traditional and important subject in organizational administration research and practice. Theoretical models and standardized methodologies are widely and successfully used in organizations with traditional hierarchical structure. However, its applicability to more decentralized and horizontal business structures, is more limited due to their specific management characteristics, processes and relationship between their components and ecosystems, which are not sufficiently contemplated in the mentioned methodologies. Through the comparative analysis of available theoretical models and case studies of actual network ecosystems, platforms, meta-organizations and more informal arrangements, this research seeks to identify the new dimensions required for the effective governance of Information technology in these classes of organizations and to propose guidelines for the complementation of methodologies.

Os altos investimentos necessários para custear recursos de Tecnologia da Informação (TI) exigem assertividade e alinhamento com as estratégias organizacionais, assim como a responsabilidade de todas áreas da organização, e não só da área de TI. Este cenário faz com que a Governança de Tecnologia da Informação (GTI) venha ganhando importância na gestão de organizações públicas e privadas nos últimos anos. O presente trabalho estudou o nível de gastos em TI e sua evolução nas secretarias do Governo do Estado de São Paulo no período de 2004 a 2013, e sua relação com maturidade em GTI. Partiu-se do pressuposto de que gestores com maior maturidade em GTI possuem maior compreensão sobre a importância estratégica da TI, se encontram mais preparados para gerir o seu orçamento e estão mais capacitados para elaborar e defender propostas de projetos de TI. Desta forma, conseguiriam apropriar, para a TI, uma parcela maior do orçamento total da sua organização. Também se considerou que as organizações incrementaram seus investimentos em TI nos últimos anos, como decorrência natural da evolução da TI e do grande número de novos recursos disponíveis. A pesquisa se baseou em dados secundários disponibilizados pelo Governo do Estado, e aplicou a técnica de análise fatorial sobre os dados de maturidade em GTI para geração de um score fatorial que servisse como indicador único do nível de maturidade das secretarias. Este dado foi correlacionado com a parcela de gastos com TI de cada secretaria através de análise de correlação e regressão linear. Por fim, foram definidas categorias para o nível de maturidade em GTI e para o nível de gastos com TI, e as secretarias foram categorizadas e agrupadas por categoria. Com base nos agrupamentos formados, foi realizada a análise de correspondência entre as categorias. Os resultados revelaram que não existe relação entre nível de maturidade em GTI e o nível de participação de gastos com TI e sua evolução: secretarias com altos níveis de maturidade em GTI apresentaram baixos níveis de participação de gastos com TI, enquanto secretarias menos maduras apresentaram maiores níveis. Também se verificou que aproximadamente 40% das secretarias analisadas apresentaram baixos níveis de maturidade em GTI, com scores fatoriais abaixo de 1 (numa escala de 0 a 5). Os resultados também mostraram que os gastos com TI do Governo cresceram em valores absolutos ao longo do período, mas que a parcela de gastos com TI em relação aos gastos totais não cresceu, se mantendo praticamente estacionada em percentuais próximos a 1% nos últimos anos. Em muitas das secretarias estudadas, na verdade, o nível de gastos com TI diminuiu ao longo do período, o que sugere que a importância relativa da TI dentro das prioridades do Governo não cresceu. / The high investments needed to finance the resources of Information Technology (IT) involve risks and demand assertiveness and alignment with the organization strategies, as well as the responsibility of all the sectors of the organization, and not only IT sector. This scenario results a continuous improvement in importance of Information Technology Governance (ITG) in public and private organizations in the last years. This research studied the level of investment in IT and its evolution within departments of São Paulo State Government from 2004 to 2013, and its relationship with ITG maturity. It started on the assumption that managers with higher ITG maturity have a greater understanding of the strategic importance of IT, are better prepared to manage their budget and are better qualified to elaborate and argue in favor of IT projects proposals. This way, they could take ownership, towards IT, of a larger portion of the company\'s total budget. It was also considered that companies have increased their investments in IT over recent years, as a natural consequence of IT evolution and the large number of new features available. The research was based on secondary data provided by the State Government, and used factor analysis technique for generating a factor score that could be used as a single indicator of departments maturity level. This information was correlated with the IT investment share of each department through correlation analysis and linear regression. Finally, categories have been defined for ITG maturity level and for level of investment in IT, and the secretariats were categorized and grouped by category. Based on obtained groups, a correspondence analysis among categories was undertaken. The results revealed that there is no relationship between ITG maturity level and level of investment in IT and its evolution: departments with high levels of ITG maturity had lower investment in IT levels, and less mature departments had higher levels of investment in IT. It also showed that around 40% of analysed departments showed low ITG maturity level, holding factorial scores below one (1) - on a scale from 0 to 5. Results also showed that State Government investment in IT has increased in absolute terms over the period, however the portion of total budget invested in IT has not grown, and keeps virtually frozen over last years, at percentages close to 1%. In fact, the level of investment in IT has decreased over the period for most part of State departments, which indicates that the relative importance of IT as a Government priority has not grown.

A governança da Tecnologia de Informações é um tema tradicional e importante para a pesquisa e a prática da administração de organizações. Modelos teóricos e metodologias padronizadas são largamente empregadas e com sucesso em organizações com estrutura tradicional hierárquica. Entretanto, a sua aplicação em estruturas de negócios mais descentralizadas e horizontais, encontra limites devido às suas características próprias de gestão, processos e relacionamento entre seus componentes e ecossistemas, as quais não são suficientemente contempladas nas metodologias mencionadas. Por meio da análise comparativa dos modelos teóricos disponíveis e de estudos de casos reais de ecossistemas de organizações em rede, plataformas, meta-organizações e arranjos mais informais, esta pesquisa procura identificar as novas dimensões requeridas para a governança efetiva da Tecnologia de Informação nestas classes de organizações e propor diretrizes para a complementação das metodologias. / The governance of Information Technology is a traditional and important subject in organizational administration research and practice. Theoretical models and standardized methodologies are widely and successfully used in organizations with traditional hierarchical structure. However, its applicability to more decentralized and horizontal business structures, is more limited due to their specific management characteristics, processes and relationship between their components and ecosystems, which are not sufficiently contemplated in the mentioned methodologies. Through the comparative analysis of available theoretical models and case studies of actual network ecosystems, platforms, meta-organizations and more informal arrangements, this research seeks to identify the new dimensions required for the effective governance of Information technology in these classes of organizations and to propose guidelines for the complementation of methodologies.

Information technology audit has proven to be a relatively new, less researched and rapidly expanding field among large, medium and even small businesses (commercial and non-commercial organisations). The implementation rate has grown rapidly and presents a huge growth market for audit consultants due to the need for transparency and compliance with regulation (for example: Sarbanes Oxley Act) and the need to be competitive in the marketplace. The audit process is being conducted mainly by consultants following a traditional process but using different proprietary approaches and mostly done manually. The purpose of this study is to present a scientific method to attach a purely measurement focus to the auditing process so as to provide an auditing as well as a quantitative outcome of the performance to the various IS entities that are audited using a novel automated method that can save organisations considerable resources in terms of time, cost and effort. The nature of the topic directed the researcher to three domains of information system (IS) namely studies on IS measurement, IT governance and software engineering. These areas provided information on the nature of IS measurement and the models used; the process of auditing/measurement and the corresponding frameworks used; the principles and methodology of measurement of IS entities; and measurement models used both in the software engineering and information systems domain. The review of the literature gave rise to the research question and the COBIT-GQM (Control Objectives for Information Technology Audit) – Goal Question Metrics) model. The research question that had emerged out of the four propositions “How can an IT audit or governance framework be used to measure the effectiveness of IS entities in a scientific manner using customised and goal oriented metrics” along with the nature of data sought (positivist), guided the researcher to qualitative research using multiple case studies to test the theoretical model (grounded theory) that had emerged out of the literature review. The theoretical model was automated (with a front end interface and a back-end database) and initially tested for usability issues. Then the common COBIT control objective that was obtained through an initial survey was entered into the database along with a set of questions and metrics (developed by the researcher by following the given GQM guidelines). This application that was demonstrated, and given for evaluation in four organisations gave rise to expected and surprising results. While the respondents expressed their desire to incorporate a customised and goal oriented measurement perspective to their IT audit/performance functions, that would save them time, effort and cost, numerous suggestions were provided that need to be incorporated into the model to make it fully functional. Notable among them are the need to embed a multiple contextual qualifying layer, incorporating benchmarking feature to the model, and the need to link this with the maturity model. These were incorporated into the model and a comprehensive model incorporating all the suggestions was created. The qualitative case study method being used here more to evaluate a theory, provided a sound base for future studies to generate hypothesis that can be evaluated using quantitative survey methods for the model to be generalised. IT auditing being a relatively new, less researched, conventional and high growth oriented field, the use of an innovative, comprehensive, automated and scientific method of audit and measurement method will satisfy the implied need for organisations to incorporate the diverse audit/measurement/ control/standards into one comprehensive method and this research is a major step in this direction. Since the new model is comprehensive and can be automated organisations can economise in terms of time, cost and effort. Irrespective of the nature of economic cycle the need for economising in terms of cost, time and effort is universal for all organisations.

Information technology audit has proven to be a relatively new, less researched and rapidly expanding field among large, medium and even small businesses (commercial and non-commercial organisations). The implementation rate has grown rapidly and presents a huge growth market for audit consultants due to the need for transparency and compliance with regulation (for example: Sarbanes Oxley Act) and the need to be competitive in the marketplace. The audit process is being conducted mainly by consultants following a traditional process but using different proprietary approaches and mostly done manually. The purpose of this study is to present a scientific method to attach a purely measurement focus to the auditing process so as to provide an auditing as well as a quantitative outcome of the performance to the various IS entities that are audited using a novel automated method that can save organisations considerable resources in terms of time, cost and effort. The nature of the topic directed the researcher to three domains of information system (IS) namely studies on IS measurement, IT governance and software engineering. These areas provided information on the nature of IS measurement and the models used; the process of auditing/measurement and the corresponding frameworks used; the principles and methodology of measurement of IS entities; and measurement models used both in the software engineering and information systems domain. The review of the literature gave rise to the research question and the COBIT-GQM (Control Objectives for Information Technology Audit) – Goal Question Metrics) model. The research question that had emerged out of the four propositions “How can an IT audit or governance framework be used to measure the effectiveness of IS entities in a scientific manner using customised and goal oriented metrics” along with the nature of data sought (positivist), guided the researcher to qualitative research using multiple case studies to test the theoretical model (grounded theory) that had emerged out of the literature review. The theoretical model was automated (with a front end interface and a back-end database) and initially tested for usability issues. Then the common COBIT control objective that was obtained through an initial survey was entered into the database along with a set of questions and metrics (developed by the researcher by following the given GQM guidelines). This application that was demonstrated, and given for evaluation in four organisations gave rise to expected and surprising results. While the respondents expressed their desire to incorporate a customised and goal oriented measurement perspective to their IT audit/performance functions, that would save them time, effort and cost, numerous suggestions were provided that need to be incorporated into the model to make it fully functional. Notable among them are the need to embed a multiple contextual qualifying layer, incorporating benchmarking feature to the model, and the need to link this with the maturity model. These were incorporated into the model and a comprehensive model incorporating all the suggestions was created. The qualitative case study method being used here more to evaluate a theory, provided a sound base for future studies to generate hypothesis that can be evaluated using quantitative survey methods for the model to be generalised. IT auditing being a relatively new, less researched, conventional and high growth oriented field, the use of an innovative, comprehensive, automated and scientific method of audit and measurement method will satisfy the implied need for organisations to incorporate the diverse audit/measurement/ control/standards into one comprehensive method and this research is a major step in this direction. Since the new model is comprehensive and can be automated organisations can economise in terms of time, cost and effort. Irrespective of the nature of economic cycle the need for economising in terms of cost, time and effort is universal for all organisations.

A Governança da Tecnologia da Informação tem atraído interesse crescente nas organizações e no meio acadêmico, refletindo a importância e a evolução da Tecnologia da Informação na sociedade moderna. Inspirada na Governança Corporativa, a Governança da Tecnologia da Informação relaciona-se com a qualidade das decisões e ambiciona assegurar que as expectativas para a Tecnologia da Informação sejam realizadas, viabilizando a medição do desempenho, a gestão dos recursos e o controle dos riscos. Frequentemente (e não adequadamente), a Governança da Tecnologia da Informação é considerada como um tipo especial de gestão, e alguns dos modelos conhecidos como referência para a Governança da Tecnologia da Informação são dedicados a aspectos operacionais. A Governança da Tecnologia da Informação extrapola modelos de referência ou estilos de gerenciamento e está relacionada com os assuntos mais estratégicos. Motivado pelas lacunas na delimitação dos escopos e das fronteiras entre a Governança e a Gestão da Tecnologia da Informação, este trabalho investiga os elementos diferenciadores entre estes temas. São analisadas as definições, os escopos e os modelos teóricos da Governança da Tecnologia da Informação. Alicerçada na revisão da literatura, é feita uma pesquisa qualitativa baseada nos estudos de casos de quatro empresas brasileiras com programas de Governança de Tecnologia da Informação implantados. / Information Technology Governance has gathering increasing interest both in organizations agenda and in academic research, reflecting the importance and evolution of Information Technology in society. Inspired by Corporate Governance, Information Technology Governance is related to the quality of decisions and aims to assure that expectations to Information Technology are achieved by performance measurement, resource management and risk control. This work is motivated by gaps in delimitating the borders between Information Technology Management and Information Technology Governance. Information Technology Governance is frequently (and not adequately) considered as a special class of Information Technology Management, and some Information Technology Governance models are indeed dedicated to operational aspects of Information Technology. Information Technology Governance is in fact more than reference models or a management style, dealing with more strategic issues in IT agenda. This research project aims to investigate differences between Information Technology Governance and Information Technology Management, by means of analyzing the scope and the reference models of Information Technology Governance. Based on a literature review, a qualitative research using case study is conducted in the context of four Brazilian companies with implemented Information Technology Governance programs.