Determinants of Effective Information Technology Governance

International Journal of Auditing

Volumn 17, Issue 1, 2013, Pages 75-99

  Ferguson, Colin ^a   Green, Peter ^b   Vaswani, Ravi ^b   Wu, Gang ^a  

^a UNIVERSITY OF MELBOURNE   (Australia)

^b UNIVERSITY OF QUEENSLAND   (Australia)

Author keywords

CIO position; IS management and control; IT balanced scorecard; IT governance; IT steering committee

Indexed keywords

EID: 84873256363     PISSN: 10906738     EISSN: 10991123     Source Type: Journal    
DOI: 10.1111/j.1099-1123.2012.00458.x     Document Type: Article

References (90)

1. Albrecht, W. S., Albrecht, C. O., Albrecht, C. C. & Zimbelman, M. F. (2010), Fraud Examination, 4th edn, Mason, OH: South-Western.
2. Ali, S. & Green, P. (2007), 'IT governance mechanisms in public sector organisations: an Australian context', Journal of Global Information Management, Vol. 15, No. 3, pp. 41-63.
3. Applegate, L. M. & Elam, J. J. (1992), 'New information systems leaders: a changing role in a changing world', MIS Quarterly, Vol. 16, No. 4, pp. 469-90.
4. Arens, A., Elder, R. & Beasley, M. (2006), Auditing and Assurance Services: An Integrated Approach, 11th edn, Upper Saddle River, NJ: Prentice-Hall.
5. Armstrong, J. S. & Overton, T. S. (1977), 'Estimating nonresponse bias in mail surveys', Journal of Marketing Research, Vol. 14, pp. 396-402.
6. Bedard, J. C. & Johnstone, K. M. (2004), 'Earnings manipulation risk, corporate governance risk, and auditors' planning and pricing decisions', The Accounting Review, Vol. 79, No. 2, pp. 277-304.
7. Benjamin, R. I., Dickinson, C. Jr. & Rockart, J. F. (1985), 'Changing role of the corporate information systems officer', MIS Quarterly, Vol. 9, No. 3, pp. 177-88.
8. Berle, A. & Means, G. (1932), The Modern Corporation and Private Property, New York: The Macmillan Company.
9. Blanton, J. E., Watson, H. J. & Moody, J. W. (1992), 'Toward a better understanding of information technology organization: a comparative case study', MIS Quarterly, Vol. 16, No. 4, pp. 531-55.
10. Bonner, S. (2008), Judgment and Decision Making in Accounting, Upper Saddle River, NJ: Prentice-Hall.
11. Bowen, P. L., Cheung, M-Y. D. & Rohde, F. (2007), 'Enhancing IT governance practices: a model and case study of an organization's efforts', International Journal of Accounting Information Systems, Vol. 8, pp. 191-221.
12. Brancheau, J. & Wetherbe, J. C. (1987), 'Key issues in information systems - 1986', MIS Quarterly, Vol. 11, No. 1, pp. 23-46.
13. Clarkson, P., Ferguson, C. & Hall, J. (2003), 'Auditor conservatism and voluntary disclosure: evidence from the Year 2000 systems issues', Accounting and Finance, Vol. 43, pp. 21-40.
14. Coakes, S. J. & Steed, L. G. (2003), SPSS Analysis without Anguish, Milton, QLD: John Wiley & Sons.
15. Cobit Steering Committee & The IT Governance Institute (2000), Executive Summary. Rolling Meadows, IL.: ISACA. pp. 1-17. Available at: http://www.ISACA.org/execsum.pdf (accessed May 4, 2003).
16. CobiT 4.1 (2007), Rolling Meadows, IL: IT Governance Institute.
17. Cohen, J., Krishnamoorthy, G. & Wright, A. (2002), 'Corporate governance on the audit process', Contemporary Accounting Research, Vol. 19, No. 4, pp. 573-94.
18. Davenport, T. H. (1993), Process Innovation, Reengineering Working through Information Technology, Boston, MA: Harvard Business School Press.
19. Davis, G. B. (1974), Management Information Systems: Conceptual Foundations, Structure and Development, Blacklick, OH: McGraw-Hill.
20. Dechow, P. M., Ge, W., Larson, C. R. & Sloan, R. G. (2011), 'Predicting material accounting misstatements', Contemporary Accounting Research, Vol. 28, No. 1, pp. 17-82.
21. De Haes, S. & Van Grembergen, W. (2008), 'Analysing the relationship between IT governance and business/IT alignment maturity', Proceedings of the 41st Hawaii International Conference on Systems Science. New York: IEEE.
22. Dillman, D. A. (2000), Mail and Internet Surveys: The Tailored Design Method, New York: John Wiley & Sons.
23. Dixon, P. J. & John, D. A. (1989), 'Technology issues facing corporate management in the 1990s', MIS Quarterly, Vol. 13, No. 3, pp. 247-55.
24. Doll, W. J. & Torkzadeh, G. (1987), 'The relationship of MIS steering committees to size of firm and formalisation of MIS planning', Communications of the ACM, Vol. 30, No. 11, pp. 972-8.
25. Earl, M. J. (1989), Management Strategies for Information Technology, Englewood Cliffs, NJ: Prentice-Hall.
26. Earl, M. J. (1993), 'Experiences in strategic information systems planning', MIS Quarterly, Vol. 17, No. 1, pp. 1-24.
27. Eisenhardt, K. (1989), 'Agency theory: an assessment and review', Academy of Management Review, Vol. 14, No. 1, pp. 57-74.
28. Fama, E. (1980), 'Agency problems and the theory of the firm', Journal of Political Economy, Vol. 88, No. 2, pp. 288-307.
29. Gelinas, U., Sutton, S. & Fedorowicz, J. (2004), Business Processes and Information Technology, Cincinnati, OH: Thomson Learning.
30. Goodhue, D. L. & Thompson, P. (1995), 'Task-technology fit and individual performance', MIS Quarterly, Vol. 19, No. 2, pp. 213-36.
31. Grover, V., Jeong, S-R., Kettinger, W. J. & Lee, C. C. (1993), 'The chief information officer: a study of managerial roles', Journal of Management Information Systems, Vol. 10, No. 2, pp. 107-30.
32. Guldentops, E., Van Grembergen, W. & De Haes, S. (2002), 'Control and governance maturity survey: establishing a reference benchmark and a self-assessment tool', ISACA Control, Vol. 6.
33. Gupta, Y. P. & Raghunathan, T. S. (1989), 'Impact of information systems (IS) steering committees on IS planning', Decision Sciences, Vol. 20, No. 4, pp. 777-93.
34. Hair, J. F. Jr., Anderson, R. E., Tatham, R. L. & Black, W. C. (1998), Multivariate Data Analysis, 5th edn, Upper Saddle River, NJ: Prentice-Hall.
35. Hall, J. A. & Singleton, T. (2005), Information Technology Auditing and Assurance, Florence, KY: South-Western.
36. Hambrick, D. C. (1981), 'Environment, strategy, and power within top management teams', Administrative Science Quarterly, Vol. 26, No. 2, pp. 253-76.
37. Hardy, G. (2002), 'Make sure management and IT are on the same page: implementing an IT governance framework', Information Systems Control Journal, Vol. 3, pp. 14-16.
38. Hopwood, W. S., Leiner, J. L. & Young, G. R. (2008), Forensic Accounting, New York: McGraw-Hill.
39. Information Systems Audit and Control Association (ISACA) (2002), IS Auditing Guideline, IT Governance Document Number 060.020.050, Rolling Meadows, IL: ISACA.
40. Information Systems Audit and Control Association (ISACA) (2011), COBIT 5: Framework, Rolling Meadows, IL: ISACA.
41. Information Systems Audit and Control Foundation (ISACF) (2003), CISA Review Manual 2003, Rolling Meadows, IL: ISACF.
42. Institute of Internal Auditors (IIA) (2009), 2009 IT Audit Benchmarking Study, Altamonte Springs, FL: IIA.
43. International Federation of Accountants (IFAC) (2002), E-Business and the Accountant, New York: IFAC.
44. International Federation of Accountants (IFAC) (2009), International standard on auditing (ISA) 315: Identifying and assessing the risks of material misstatement through understanding the entity and its environment, New York: IFAC.
45. IT Governance Institute (2001), Board Briefing on IT Governance, Rolling Meadows, IL: IT Governance Institute. Available at: http://www.itgi.org/boardbriefing.pdf (accessed May 4, 2003).
46. IT Governance Institute (2002a), IT Governance Executive Summary, Rolling Meadows, IL: IT Governance Institute. Available at: http://www.itgovernance.org/itgovexecsummary.pdf (accessed May 4, 2003).
47. IT Governance Institute (2002b), IT Strategy Committee, Rolling Meadows, IL: IT Governance Institute. Available at: http://www.itgovernance.org/itstrategy.pdf (accessed May 4, 2003).
48. Jackson, I. F. (1986), Corporate Information Management, Englewood Cliffs, NJ: Prentice-Hall.
49. Jarvenpaa, S. L. & Ives, B. (1991), 'Executive involvement and participation in the management of information technology', MIS Quarterly, Vol. 15, No. 2, pp. 205-27.
50. Jensen, M. & Meckling, W. (1976), 'Theory of the firm: managerial behavior, agency costs and ownership structure', Journal of Financial Economics, Vol. 3, pp. 305-60.
51. Kaplan, R. S. & Norton, D. P. (1992), 'The balanced scorecard: measures that drive performance', Harvard Business Review, Vol. 71, pp. 75-85.
52. Karimi, J., Bhattaacherjee, A., Gupta, Y. P. & Somers, T. M. (2000), 'The effects of MIS steering committees on information technology management sophistication', Journal of Management Information Systems, Vol. 17, No. 2, pp. 207-30.
53. King, J. L. (1983), 'Centralised versus decentralised computing: organisational considerations and management options', Computing Surveys, Vol. 15, No. 4, pp. 319-49.
54. Kotb, A. & Roberts, C. (2011), 'The impact of E-business on the audit process: an investigation of the factors leading to change', International Journal of Auditing, Vol. 15, pp. 150-75.
55. KPMG (2010), Fraud and Misconduct Survey 2010, Melbourne, Vic: KPMG International.
56. Kranacher, M., Riley, R. A. Jr., & Wells, J. T. (2010), Forensic Accounting and Fraud Examination, New York: Wiley.
57. Larcker, D. & Richardson, S. (2004), 'Fees paid to audit firms, accrual choices, and corporate governance', Journal of Accounting Research, Vol. 42, No. 3, pp. 625-58.
58. Luftman, J. N., Papp, R. & Brier, T. (1999), 'Enablers and inhibitors of business-IT alignment', Communications of AIS, Vol. 1, No. 11, pp. 1-33.
59. McKeen, J. D. & Guimaraes, T. (1985), 'Selecting MIS projects by steering committee', Communications of the ACM, Vol. 28, No. 12, pp. 1344-52.
60. McLean, E. R. & Soden, J. V. (1977), Strategic Planning for MIS, New York: McGraw-Hill.
61. Meador, C. L., Guyote, M. J. & Keen, P. G. W. (1984), 'Setting priorities for DSS development', MIS Quarterly, Vol. 8, No. 2, pp. 117-29.
62. Miller, J. & Israel, E. (2002), 'KPMG: performance measurement must be linked to business strategy', The Economist Intelligence, 7 May. Available at: http://www.ebusinessforum.com/index.asp?layout=printer_friendlyanddoc_id=5652 (accessed June 5, 2003).
63. Niederman, F., Brancheau, J. C. & Wetherbe, J. C. (1991), 'Information systems management issues for the 1990s', MIS Quarterly, Vol. 15, No. 4, pp. 475-500.
64. Nolan, R. L. (1982), 'Managing information systems by committee', Harvard Business Review, Vol. 60, pp. 72-79.
65. Nunnally, J. (1978), Psychometric Theory, 2nd edn, New York: McGraw-Hill.
66. Owen, N. (2003), The Failure of HIH Insurance: Vol. I. A Corporate Collapse and its Lessons. Canberra: Canberra Publishing and Printing.
67. Peirson, G., Bird, R., Brown, R. & Howard, P. (1990), Business Finance, 5th edn, Sydney, NSW: McGraw-Hill.
68. Peterson, R., O'Callaghan, R. & Ribbers, P. M. A. (2000), 'Information technology governance by design: investigating hybrid configurations and integration mechanisms', Proceedings of the 21st International Conference on Information Systems, Brisbane, Qld: Association for Information Systems.
69. Podsakoff, P. M., Scott B., Lee, J. & Podsakoff, N. P. (2003), 'Common method biases in behavioural research: a critical review of the literature and recommended remedies', Journal of Applied Psychology, Vol. 88, No. 5, pp. 879-903.
70. Premkumar, G. & King, W. R. (1992), 'An empirical assessment of information systems planning and role of information systems in organisations', Journal of Information Systems, Vol. 9, No. 2, pp. 99-125.
71. Raghunathan, B. & Raghunathan, T. S. (1989), 'MIS steering committees: their effect on information systems planning', Journal of Information Systems, Vol. 3, No. 2, pp. 104-16.
72. Raghunathan, B. & Raghunathan, T. S. (1990), 'Planning implications of the information systems strategic grid: an empirical investigation', Decision Sciences, Vol. 21, No. 2, pp. 287-300.
73. Robb, A. & Parent, M. (2008), 'Understanding IT governance: a case of two financial mutuals', Journal of Global Information Management, Vol. 17, No. 3, pp. 59-77.
74. Rockart, J. F. & Scott-Morton, M. S. (1984), 'Implications of changes in information technology for corporate strategy', Interfaces, Vol. 14, No. 1, pp. 28-31.
75. Rousseau, D. M. (1978), 'Characteristics of departments, positions and individuals: contexts for attitudes and behaviour', Administrative Science Quarterly, Vol. 23, No. 4, pp. 531-40.
76. Sambamurthy, V. & Zmud, R. W. (1999), 'Arrangements for information technology governance: a theory of multiple contingencies', MIS Quarterly, Vol. 23, No. 2, pp. 261-90.
77. Shleifer, A. & Vishny, R. (1997), 'A survey of corporate governance', Journal of Finance, Vol. 52, No. 2, pp. 737-83.
78. Sohal, A. S. & Fitzpatrick, P. (2002), 'IT governance and management in large Australian organisations', International Journal of Production Economics, Vol. 75, pp. 97-112.
79. Stewart, R. A. & Mohamed, S. (2001), 'Utilising the balanced scorecard for IT/IS performance evaluation in construction', Construction Innovation, Vol. 1, pp. 147-63.
80. Stoel, D., Havelka, D. & Merhout, J. W. (2012), 'An analysis of attributes that impact information technology audit quality: A study of IT and financial audit practitioners', International Journal of Accounting Information Systems, Vol. 13, No. 1, pp. 60-79.
81. Tabachnick, B. G. & Fidell, L. S. (1996), Using Multivariate Statistics, 3rd edn, New York: HarperCollins.
82. Torkzadeh, G. & Xia, W. (1992), 'Managing telecommunications by steering committee', MIS Quarterly, Vol. 16, No. 2, pp. 187-99.
83. Van der Zee, J. T. M. & De Jong, B. (1999), 'Alignment is not enough: integrating business and information technology management with the balanced business scorecard', Journal of Information Systems, Vol. 16, No. 2, pp. 137-56.
84. Van Grembergen, W. (2000), 'The balanced scorecard and IT governance', ISACA Control, Vol. 5.
85. Van Grembergen, W. & Van Bruggen, R. (1997), 'Measuring and Improving Corporate Information Technology through the Balanced Scorecard Technique', Proceedings of the 4th European Conference on the Evaluation of Information Technology, Delft.
86. Weber, R. (1999), Information Systems Control and Audit, Upper Saddle River, NJ: Prentice-Hall.
87. Weill, P. & Ross, J. (2004), IT Governance: How Top Performers Manage IT Decision Rights for Superior Results, Boston, MA: Harvard Business School Press.
88. Weill, P. & Woodham, R. (2002), 'Don't just lead, govern: implementing effective IT governance', MIT Sloan Working Paper No. 4237-02, Massachusetts Institute of Technology (MIT) - Sloan School of Management.
89. Willcocks, L. (1994), Information Management: The Evaluation of Information Systems Investments, London: Chapman and Hall.
90. Zarrella, E. (2005), 'Call for CIO board seats', The Australian Financial Review, 29 September, p. 43.