The current state of information technology governance literature

Information Technology Governance and Service Management: Frameworks and Adaptations

Volumn , Issue , 2008, Pages 1-43

  Buckby, Sherrena ^a   Best, Peter ^b   Stewart, Jenny ^c  

^a QUEENSLAND UNIVERSITY OF TECHNOLOGY   (Australia)

^b UNIVERSITY OF SOUTHERN QUEENSLAND   (Australia)

^c GRIFFITH UNIVERSITY   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 84898355100     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.4018/978-1-60566-008-0.ch001     Document Type: Chapter

References (171)

1. Ataya, G. (2003). Risk-aware decision making for new IT investments. Information Systems Control Journal, 2, 12-14.
2. Avison, D., Jones, J., Powell, P., & Wilson, D. (2004). Using and validating the strategic alignment model. Journal of Strategic Information Systems, 13(3), 223-246.
3. Bahli, B. & Rivard, S. (2005). Validating measures of information technology outsourcing risk factors. Omega, 33(doi:10.1016/jomega.2004.04.003), 175-187.
4. Beimborn, D., Wagner, H.-T., Franke, J., & Weitzel, T. (2007). The influence of alignment on the post-implementation success of a core banking information system: An embedded case study. Paper presented at the 40th Hawaii International Conference on System Sciences, Hawaii.
5. Benvenuto, N. A. & Brand, D. (2005). Outsourcing - A risk management perspective. Information Systems Control Journal, 5, 35.
6. Bergeron, F., Raymond, L., & Rivard, S. (2004). Ideal patterns of strategic alignment and business performance. Information & Management, 41, 1003-1020.
7. Blumenberg, S. A. & Hinz, D. J. (2006). Enhancing the prognostic power of IT balanced scorecards with Bayesian belief networks. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
8. Bowen, P. L., Cheung, M. Y. D., & Rohde, F. H. (2007). Enhancing IT governance practices: A model and case study of an organization's efforts. International Journal of Accounting Information Systems, 8(3), 191-221.
9. Bricnall, R., Darrell, G., Nilsson, H., & Pessi, K. (2007). Aligning IT strategy with business strategy through the balanced scorecard in a multinational pharmaceutical company. Paper presented at the 40th Hawaii International Conference on System Sciences, Hawaii.
10. Broadbent, M. (2003a). Keys to effective security. CIO, 11(7).
11. Broadbent, M. (2003b). The right combination. CIO Canada, 11(4), 13-14.
12. Broadbent, M. (2003c). Understanding IT governance. CIO Canada, 11(4).
13. Broadbent, M., Kitzis, E., & Hunter, R. (2004). Armed against risk. Optimize, 44.
14. Broadbent, M. & Weill, P. (1993). Improving business and information strategy alignment: Learning from the banking industry. IBM Systems Journal, 32(1), 162.
15. Broadbent, M. & Weill, P. (1997). Management by Maxim: How business and IT managers can create IT infrastructures. Sloan Management Review, 38(3), 77.
16. Brown, A. E. & Grant, G. G. (2005). Framing the frameworks: A review of IT governance research. Communication of the Association for Information Systems, 15, 696-712.
17. Bruce, K. (1998). Can you align IT with business strategy? Strategy and Leadership, 26(5), 16-21.
18. Buckby, S. (2008). Board review of IT governance in Australian universities. Unpublished doctoral dissertation, Queensland University of Technology, Australia.
19. Burn, J. M. & Szeto, C. (1999). A comparison of the views of business and IT management on success factors for strategic alignment. Information & Management, 37, 197-216.
20. Bushell, S. (2007). When egos dare. CIO, June, 37-44.
21. Chan, Y. E. (2000). IT value: The great divide between qualitative and quantitative and individual and organizational measures. Journal of Management Information Systems, 16(4), 225.
22. Chapin, D. A. & Akridge, S. (2005). How can security be measured? Information Systems Control Journal, 2, 43.
23. Committee of Sponsoring Organizations of the Treadway Commission (COSO) (2004). Enterprise risk management - Integrated framework. Retrieved April 29, 2008, from http://www.coso.org/publications.htm
24. Coughlan, J., Lycett, M., & Macredie, R. D. (2005). Understanding the business-IT relationship. International Journal of Information Management, 25(4), 303-319.
25. Croteau, A.-M. & Bergeron, F. (2001). An information technology trilogy: Business strategy, technological deployment and organizational performance. Journal of Strategic Information Systems, 10, 77-99.
26. Cumps, B., Viaene, S., Dedene, G., & Vandenbulcke, J. (2006). An empirical study on business/ICT alignment in European organizations. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
27. Dahlberg, T. & Kivijarvi, H. (2006). An integrated framework of IT governance and the development and validation of an assessment instrument. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
28. Dahlberg, T. & Lahdelma, P. (2007). IT governance maturity and IT outsourcing degree: An exploratory study. Paper presented at the Hawaii International Conference on System Sciences, Hawaii.
29. Davern, M. J. & Kauffman, R. J. (2000). Discovering potential and realizing value from information technology investments. Journal of Management Information Systems, 16(4), 121.
30. De Haes, S. & Van Grembergen, W. (2004). IT governance and its mechanisms. Information Systems Control Journal, 1, 27.
31. De Haes, S. & Van Grembergen, W. (2005). IT governance structures, processes and relational mechanisms: Achieving IT/business alignment in a major Belgian financial group. Paper presented at the 38th International Conference on Systems Sciences, Hawaii.
32. De Haes, S. & Van Grembergen, W. (2006). Information technology governance best practices in Belgian organizations. Paper presented at the 39th Hawaii International Conferences on System Sciences, Hawaii.
33. Dedrick, J., Gurbaxani, V., & Kraemer, K. L. (2003). Information technology and economic performance: A critical review of the empirical evidence. ACM Computing Surveys, 35(1), 1-28.
34. Doughty, K. (2000). The myth or reality of information technology steering committees. Retrieved April 29, 2008, from www.isaca.org/art3a.htm
35. D'Souza, D. & Mukherjee, D. (2004). Overcoming the challenges of aligning IT with business. The Executive's Journal, Winter, 23-31.
36. Du, S., Keil, M., Lars, M., Shen, Y., & Tiwana, A. (2006). The role of perceived control, attention-shaping, and expertise in IT project risk assessment. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
37. Erickson, T. J., Magee, J. F., Roussel, P. A., & Saad, K. N. (1990). Managing technology as a business strategy. Sloan Management Review, 31(3), 73.
38. Fairchild, A. M. (2004). Information technology outsourcing (ITO) governance: An examination of the outsourcing management maturity model. Paper presented at the 37th International Conference on System Sciences, Hawaii.
39. Gerber, M. & Von Solms, R. (2005). Management of risk in the information age. Computers & Security, 24(1), 16-30.
40. Gewald, H. & Helbig, K. (2006). A goverance model for managing outsourcing partnerships. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
41. Gold, R. S. (2002). Enabling the strategy-focused IT organization. Information Systems Control Journal, 4, 21.
42. Gold, R. S. (2003). Building the IT organization balanced scorecard. Information Systems Control Journal, 5, 46.
43. Gregor, S., Fernandez, W., Holtham, D., Martin, M., Stern, S., Vitale, M., et al. (2005). Achieving value from ICT: Key management strategies. Canberra: Department of Communications, Information Technology and the Arts, ICT Research Study.
44. Guldentops, E. (2003). Maturity measurement-First the purpose, then the method. Information Systems Control Journal, 4, 15.
45. Guldentops, E., Van Grembergen, W., & Haes, S. (2002). Control and maturity survey: Establishing a reference benchmark and a self-assessment tool. Information Systems Control Journal, 6, 32-35.
46. Hadden, L. B., DeZoort, F. T., & Hermanson, D. (2003). IT risk oversight: The role of audit committees, internal auditors and external auditors. Internal Auditing, 18(6).
47. Hamaker, S. (2000). Your IT applications inventory is all in your head - An observation related to IT governance tools. Information Systems Control Journal, 5, 21.
48. Hardy, G. & Guldentops, E. (2005). CobiT 4.0: The new face of CobiT. Information Systems Control Journal, 6.
49. Heier, H., Borgman, H. P., & Maistry, M. G. (2007). Examining the relationship between IT governance software and business value of IT: Evidence from four case studies. Paper presented at the 40th Hawaii International Conference on System Sciences, Hawaii.
50. Henderson, J. C., Rockart, J. F., & Sifonis, J. G. (1987). Integrating management support systems into strategic information systems planning. Journal of Management Information Systems, 4(1), 5-24.
51. Henderson, J. C. & Sifinos, J. G. (1988). The value of strategic IS planning: Understanding consistency, validity, and IS markets. MIS Quarterly, 12(2), 187-200.
52. Henderson, J. C. (1990). Plugging into strategic partnerships: The critical IS connection. Sloan Management Review, 31(3), 7.
53. Henderson, J. C. & Thomas, J. B. (1992). Aligning business and information technology domains: Strategic planning in hospitals. Hospital & Health Services Administration, 37(1), 71.
54. Henderson, J. C. & Venkatraman, N. (1991). Understanding strategic alignment. Business Quarterly, 55(3), 72.
55. Henderson, J. C. & Venkatraman, N. (1993). Strategic alignment: Leveraging information technology for transforming organizations. IBM Systems Journal, 32(1), 4.
56. Henderson, J. C. & Venkatraman, N. (1999). Strategic alignment: Leveraging information technology for transforming organizations. IBM Systems Journal, 38(2/3), 472-484.
57. Hinz, D. J. & Malinowski, J. (2006). Assessing the risks of IT infrastructure - A personal network perspective. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
58. Hirschheim, R. & Sabherwal, R. (2001). Detour in the path toward strategic information systems alignment. California Management Review, 44, 1(87-108).
59. Information Systems and Control Foundation. (2000). CobiT (3rd ed.). USA: Information Systems Control Foundation.
60. International Organization for Standardization (ISO) & International Electrotechnical Commission (IEC). (2004a). ISO/IEC 12207 - Software lifecycle processes Amd 2. Retrieved April 29, 2008, from www.iso.org
61. International Organization for Standardization (ISO) & International Electrotechnical Commission (IEC). (2004b). ISO 15504-4:2004 - Process assessment - Part 4: Guidance on use for process improvement and process capability determination. Retrieved April 28, 2008, from www.iso.org
62. International Organization for Standardization (ISO) & International Electrotechnical Commission (IEC) (2005a). ISO/IEC 27001 information technology - Security techniques- Information security management systems requirements. Retrieved April 29, 2008, from www.iso.org
63. International Organization for Standardization (ISO) & International Electrotechnical Commission (IEC) (2005b). ISO/IEC 27002 standard - Information technology - Security techniques - Code of practice for information security management. Retrieved April 29, 2008, from www.iso.org
64. IT Governance Institute (ITGI) (2000). IT governance roundtable - Sponsored by the IT governance institute. Information Systems Control Journal, 4, 27-28.
65. IT Governance Institute (ITGI) (2001). Board briefing on IT governance. Retrieved April 29, 2008, from www.itgi.org
66. IT Governance Institute (ITGI) (2003). Board briefing on IT governance (2nd ed.) Retrieved April 29, 2008, from www.itgi.org
67. IT Governance Institute (ITGI) (2004). IT governance status report. Retrieved April 29, 2008, from www.itgi.org
68. IT Governance Institute (ITGI) (2005a). CobiT 4.0. Rolling Meadows, IL: IT Governance Institute.
69. IT Governance Institute (ITGI) (2005b). Governance of outsourcing. Retrieved April 29, 2008, from www.itgi.org
70. IT Governance Institute (ITGI) (2005c). Information risks: Whose business are they? Retrieved April 29, 2008, from www.itgi.org
71. IT Governance Institute (ITGI) (2005d). Information security governance - Top action for security managers. Retrieved April 29, 2008, from www.itgi.org
72. IT Governance Institute (ITGI) (2005e). IT alignment: Who is in charge? Retrieved April 29, 2008, from www.itgi.org
73. IT Governance Institute (ITGI) (2005f). Measuring and demonstrating the value of IT. Retrieved April 29, 2008, from www.itgi.org
74. IT Governance Institute (ITGI) (2005g). Optimising value creation from IT investments. Retrieved April 29, 2008, from www.itgi.org
75. IT Governance Institute (ITGI) (2006a). Enterprise value: Governance of IT investments, The Val IT framework. Retrieved April 29, 2008, from www.itgi.org
76. IT Governance Institute (ITGI) (2006b). Information security governance: Guidance for boards of directors and executive management. Retrieved April 29, 2008, from www.itgi.org
77. IT Governance Institute (ITGI) (2006c). IT governance global status report 2006. Retrieved April 29, 2008, from www.itgi.org
78. IT Governance Institute (ITGI) (2007). CobiT 4.1. Rolling Meadows, IL: IT Governance Institute.
79. IT Service Management (ITSM) (2007). Overview of ITSM. Retrieved April 29, 2008, from www.itsm.info/ITSM.htm
80. Jogani, A. (2006). Governance of mobile technology in enterprises. Information Systems Control Journal, 4, 25-27.
81. Johnstone, D., Huff, S., & Hope, B. (2006). IT projects: Conflict, governance and systems thinking. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
82. Kaplan, R. & Norton, D. (1992). The balanced scorecard-measures that drive performance. Harvard Business Review, January-February, 71-79.
83. Karake, Z. A. (1992). An empirical investigation of information technology structure, control and corporate governance. Journal of Strategic Information Systems, 1(5), 258-265.
84. Karimi, J., Bhattacherjee, A., Gupta, Y. P., & Somers, T. M. (2000). The effects of MIS steering committees on information technology management sophistication. Journal of Management Information Systems, 17(2), 207.
85. Kearns, G. S. & Lederer, A. L. (2003). A resource-based view of strategic IT alignment: How knowledge sharing ceates competitive advantage. Decision Sciences, 34(1), 1-27.
86. Keyes-Pearce, S. V. (2002). Rethinking the importance of IT governance in the e-world. Paper presented at the 6th Pacific Asia Conference on Information Systems, Tokyo, Japan.
87. Kim, S. M. (2003). Information technology and governance: Substitution and complementary. University of Illinois at Urbana-Champaign, Illinois.
88. Kliem, R. (2004). Managing the risks of offshore IT development projects. Information Systems Management, 21(3), 22.
89. Kohli, R. & Devaraj, S. (2004). Realizing the business value of information technology investments: An organizational process. MIS Quarterly Executive, 3(1), 53-68.
90. Kwon, D. & Watts, S. (2006). IT valuation in turbulent times. Journal of Strategic Information Systems, 15, 327-354.
91. Lambeth, J. (2007). Using CobiT as a tool to lead enterprise IT organizations. Information Systems Control Journal, 1(28-29).
92. Lee, B. & Menon, N. M. (2000). Information technology value through different normative lenses. Journal of Management Information Systems, 16(4), 99.
93. Legrenzi, C. (2003). The second edition of the European survey on the economic value of information technology: Inventory of practices concerning IT governance. Information Systems Control Journal, 3, 50.
94. Levine, R. (2004). Risk management systems: Understanding the need. Information Systems Management, 21(2), 31.
95. Luftman, J. N. (2000). Addressing business-IT alignment maturity. Communications of the Association for Information Systems, 4(14), 1-50.
96. Luftman, J. N. (2003). Assessing IT/business alignment. Information Systems Management, Fall, 9-15.
97. Luftman, J. N. & Brier, T. (1999). Achieving and sustaining business-IT alignment. California Management Review, 42(1), 109-121.
98. Luftman, J. N., Lewis, P. R., & Oldach, S. H. (1993). Transforming the enterprise: The alignment of business and information technology strategies. IBM Systems Journal, 32(1), 198.
99. Luftman, J. N., Papp, R., & Brier, T. (1999). Enablers and inhibitors of business-IT alignment. Communications of the Association for Information Systems, 1, 1-32.
100. Maes, R. (1999). A generic framework for information management. Retrieved April 29, 2008, from http://primavera.fee.uva.nl/html/working_papers.cfm
101. Maes, R., Rijsenbrij, D., Truijens, O., & Goedvolk, H. (2000). Redefining business-IT alignment through a unified framework. PrimaVera Working Paper Series - University of Amsterdam.
102. Martin, N., Gregor, S., & Hart, D. (2005). The social dimension of business and IS/IT alignment: Case studies of six public-sector organizations. Australian Accounting Review, 15(3), 28-38.
103. McKay, J., Marshall, P., & Smith, L. (2003). Steps towards effective IT governance: Strategic IT planning, evaluation and benefits management. Paper presented at the 7th Pacific Asia Conference on Information Systems, Adelaide, South Australia.
104. Melville, N., Kraemer, K. L., & Gurbaxani, V. (2004). Review: Information technology and organizational performance: An integrative model of IT business value. MIS Quarterly, 28(2), 283-322.
105. Meyer, N. D. (2004). Systemic IS governance: An introduction. Information Systems Management, 21(4), 23.
106. Milis, K., Viaene, S., & Ribbers, P. (2006). On how the feasibility study is influenced by an ICT project's main trigger. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
107. Mukherji, A. (2001). The evolution of information systems: Their impact on organizations and structures. Management Decision, 40(5/6), 497-507.
108. Murray, J. P. (2004). Judging IT department performance. Information Systems Management, Spring.
109. Papp, R. (1999). Business-IT alignment: Productivity paradox payoff? Industrial Management & Data Systems, 99(8), 367.
110. Pareek, M. (2006). Living with risk. Information Systems Control Journal, 6, 35-38.
111. Peak, D. & Guynes, C. S. (2003). Improving information quality through IT alignment planning: A case study. Information Systems Management, Fall, 22-28.
112. Pederiva, A. (2003). The CobiT maturity model in a vendor evaluation case. Information Systems Control Journal, 3, 26.
113. Peterson, R. (2001). Configurations and coordination for global information technology governance: Complex designs in a transnational European context. Paper presented at the 34th International Conference on Systems Sciences, Hawaii.
114. Peterson, R. (2004). Crafting information technology governance. Information Systems Management, 21(4), 7.
115. Peterson, R. R., O'Callaghan, R., & Ribbers, P. M. A. (2000). Information technology governance by design: Investigating hybrid configurations and integration mechanisms. Paper presented at the International Conference of Information Systems, Brisbane, Queensland, Australia.
116. Pironti, J. P. (2006). Information security governance: Motivations, benefits and outcomes. Information Systems Control Journal, 4, 45-48.
117. Powell, A. & Yager, S. E. (2004). Exploring reputation differences in information systems groups. Journal of Information Technology Cases and Applications, 6(2), 5-26.
118. Rau, K. G. (2004a). The CIO dashboard performance management program: Measuring and managing the value of IT. The Executive's Journal, Winter.
119. Rau, K. G. (2004b). Effective governance of IT: Design objectives, roles, and relationships. Information Systems Management, 21(4), 35.
120. Reich, B. H. & Benbasat, I. (2000). Factors that influence the social dimension of alignment between business and information technology objectives. MIS Quarterly, 24(1), 81-113.
121. Ribbers, P. M. A., Peterson, R. R., & Parker, M. M. (2002). Designing information technology governance processes: Diagnosing contemporary practices and competing theories. Paper presented at the 35th International Conference on Systems Sciences, Hawaii.
122. Robinson, N. (2007). The many faces of IT governance: Crafting an IT governance architecture. Information Systems Control Journal, 1, 14-16.
123. Ross, S. J. (2006). IS security matters: Converging need, diverging response. Information Systems Control Journal, 2, 8-9.
124. Ryan, S. D. & Harrison, D. A. (2000). Considering social subsystem costs and benefits in information technology investment decisions: A view from the field on anticipated payoffs. Journal of Management Information Systems, 16(4), 11.
125. Sambamurthy, V. & Zmud, R. W. (1999). Arrangements for information technology governance: A theory of multiple contingencies. MIS Quarterly, 23(2), 261-290.
126. SAS Ltd. (2004). Operational risk management in the financial services industry. April 30, 2008, from http://www.sas.com/industry/banking/oprisk/index.html
127. Saull, R. (2000). The IT Balanced Scorecard- A Roadmap to Effective Governance of a Shared Services IT Organization. Information Systems Control Journal, 2, 31-38.
128. Schwarz, A. & Hirschheim, R. (2003). An extended platform logic perspective of IT governance: managing perceptions and activities of IT. The Journal of Strategic Information Systems, 12(2), 129-166.
129. Sherer, S. A. (2004). IS project selection: The role of strategic vision and IT governance. Paper presented at the 37th Hawaii International Conference on System Sciences, Hawaii.
130. Silvius, A. J. G. (2007). Business and IT alignment in theory and practice. Paper presented at the 40th Hawaii International Conference on System Sciences, Hawaii.
131. Sircar, S., Turnbow, J. L., & Bordoloi, B. (2000). A framework for assessing the relationship between information technolgy investments and firm performance. Journal of Management Information Systems, 16(4), 69.
132. Sledgianowski, D. & Luftman, J. (2005). IT-business strategic alignment maturity- A case study. Journal of Cases of Information Technology, 7(2), 102.
133. Smaczny, T. (2001). Is an alignment between business and information technology the appropriate paradigm to manage IT in today's organizations? Management Decisions, 39(10), 797-802.
134. Software Engineering Institute (2007). What is CMMI? Retrieved April 30, 2008, from www.sei.cmu.edu/cmmi/general/index.html
135. Sohal, A. S. & Fitzpatrick, P. (2002). IT governance and management in large Australian organizations. International Journal of Production Economics, 75(1-2), 97.
136. Standards Australia (2005). Corporate governance of information & communication technologyAS8015-2005: Standards Australia.
137. Standards Australia & Standards New Zealand (2004). Risk management AS/NZS 4360:2004: Standards Australia/Standards New Zealand.
138. Stewart, A. (2004). On risk: Perception and direction. Computers & Security, 23(5), 362-370.
139. Strnadl, C. F. (2006). Aligning business and IT: The process-driven architecture model. Information Systems Management, 23(4), 67-77.
140. Tallon, P. P. (2007). Does IT pay to focus? An analysis of IT business value under single and multi-focused business strategies. Journal of Strategic Information Systems, 16(3), 278-300.
141. Tallon, P. P., Kraemer, K. L., & Gurbaxani, V. (2000). Executives' perceptions of the business value of information technology: A process-oriented approach. Journal of Management Information Systems, 16(4), 145.
142. Thatcher, M. E. & Pingry, D. E. (2007). Modeling the IT value paradox. Communications of the ACM, 50(8), 41-45.
143. Thorp, J. (2006). Value management-responding to the challenge of value. Information Systems Control Journal, 5, 21-22.
144. Trites, G. (2003). Director responsibility for IT governance. Paper presented at the University of Waterloo IS Assurance Symposium, University of Waterloo Canada.
145. Tyler, R. (2000). Implementing CobiT in New South Wales Health. Information Systems Control Journal, 3, 30-32.
146. United Kingdom Office of Government Commerce & IT Service Management Forum (2005). The information technology infrastructure library (ITIL) - Version 3. Retrieved April 30, 2008, from www.itil.uk.com, www.itsm.info/ITIL.htm
147. Van Der Zee, J. T. M. & De Jong, B. (1999). Alignment is not enough: Integrating business and information technology management with the balanced business scorecard. Journal of Management Information Systems, 16(2), 137-156.
148. Van Grembergen, W. (2000). The balanced scorecard and IT governance. Information Systems Control Journal, 2, 40-43.
149. th Hawaii International Conference on System Sciences, Hawaii.
150. Van Grembergen, W. & De Haes, S. (2005a). CobiT's management guidelines revisited: The KGIs/KPIs cascade. Information Systems Control Journal, 6, 54.
151. Van Grembergen, W. & De Haes, S. (2005b). IT governance and its mechanisms. Retrieved April 30, 2008, from www.uam.be
152. Van Grembergen, W. & De Haes, S. (2005c). Measuring and improving IT governance through the balanced scorecard. Information Systems Control Journal, 2, 35.
153. Van Grembergen, W., De Haes, S., & Amelinckx, I. (2003). Using CobiT and the balanced scorecard as instruments for service level management. Information Systems Control Journal, 4, 56.
154. Van Grembergen, W., De Haes, S., & Moons, J. (2005). Linking business goals to IT goals and CobiT processes. Information Systems Control Journal, 4, 18-22.
155. Van Grembergen, W., De Haes, S., & Van Brempt, H. (2007). Prioritising and linking business and IT goals in the financial sector. Paper presented at the 40th Hawaii International Conference on System Sciences, Hawaii.
156. Van Grembergen, W., Saull, R., & De Haes, S. (2003). Linking the IT balanced scorecard to the business objectives at a major Canadian financial group. Journal of Information Technology Cases and Applications, 5(1), 23-45.
157. Van Grembergen, W. & Van Bruggen, R. (1997). Measuring and improving corporate information technology through the balanced scorecard technique. Paper presented at the Fourth European Conference on the Evaluation of Information Technology, Delft, (pp.163-171).
158. Van Lier, J. & Dohmen, T. (2007). Benefits management and strategic alignment in an IT outsourcing context. Paper presented at the 40th Hawaii International Conference on System Sciences, Hawaii.
159. Von Solms, B. & Von Solms, R. (2004). The 10 deadly sins of information security management. Computers & Security, 23(5), 371-376.
160. Von Solms, S. H. (2005). Information security governance - Compliance management vs. operational management. Computers & Security, 24(6), 443-447.
161. Wagner, H.-T., Beimborn, D., Franke, J., & Weitzel, T. (2006). IT business alignment and IT usage in operational processes: A retail banking case. Paper presented at the 39th Hawaii International Conference on System Sciences, Hawaii.
162. Ward, J., De Hertogh, S., & Viaene, S. (2007). Managing benefits from IS/IT investments: An empirical investigation into current practice. Paper presented at the 40th Hawaii International Conference on System Sciences, Hawaii.
163. Warland, C. & Ridley, G. (2005). Awareness of IT control frameworks in an Australian state government: A qualitative case study. Paper presented at the 38th Hawaii International Conference on System Sciences, Hawaii.
164. Weill, P. (2004). Don't just lead, govern: How top-performing firms govern IT. MIS Quarterly Executive, 3(1), 1-17.
165. Weill, P. & Ross, J. W. (2004). IT governance-How top performers manage IT decision rights for superior results. Boston, Massachusetts: Harvard Business School Press.
166. Wiederkehr, B. J. (2000). Group wide implementation of CobiT framework. Information Systems Control Journal, 5, 27-29.
167. Wiederkehr, B. J. (2003). IT security awareness program. Information Systems Control Journal, 3, 30-32.
168. Willcocks, L., Feeny, D., & Olson, N. (2006). Implementing core IS capabilities: Feeny-Willcocks IT governance and management framework revisited. European Management Journal, 24(1), 28-37.
169. Willcoxson, L. & Chatham, R. (2006). Testing the accuracy of the IT stereotype: Profiling IT managers' personality and behavioural characteristics. Information & Management, 43, 697-705.
170. Young, R. C. & Jordan, E. (2002). IT governance and risk management: An integrated multistake-holder framework. Paper presented at the Asia Pacific Decision Sciences Institute, Bangkok, Thialand.
171. Young, R. C. & Jordan, E. (2003, 10-13 July). Passion & IT governance. Paper presented at the 7th Pacific Asia Conference on Information Systems, Adelaide South Australia.