Exploring the shadows: IT Governance approaches to user-driven innovation

ECIS 2012 - Proceedings of the 20th European Conference on Information Systems

Volumn , Issue , 2012, Pages

  Györy, Andreas ^a   Cleven, Anne ^b   Uebernickel, Falk ^a   Brenner, Walter ^a  

^a UNIVERSITY OF ST GALLEN   (Switzerland)

^b A2 Research   (Switzerland)

Author keywords

Bring your own device; Business IT alignment; Business driven; IS security; IT governance; Non compliance; Shadow IT; User driven

Indexed keywords

UBIQUITOUS COMPUTING; WEB SERVICES;

BRING YOUR OWN DEVICES; BUSINESS - IT ALIGNMENTS; BUSINESS-DRIVEN; IS SECURITY; IT GOVERNANCE; NON-COMPLIANCE; SHADOW IT; USER-DRIVEN;

INFORMATION SYSTEMS;

EID: 84905750450     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (64)

1. Accenture (2009). "Millennials vor den Toren" - Anspruch der Internet-Generation an IT. 13.
2. Bansal, P. (2011). BlackBerry outage frustrates investment bankers. Reuters, 1.
3. Behrens, S. (2009). Shadow Systems: The Good, The Bad and the Ugly. Communications of the ACM, 52, 124-129.
4. Behrens, S. and Sedera, W. (2004). Why Do Shadow Systems Exist after an ERP Implementation? Lessons from a Case Study. In Pacific Asia Conference on Information Systems, 1713-1726.
5. Benaroch, M., Lichtenstein, Y. and Robinson, K. (2006). Real Options in Information Technology Risk Management: An Empirical Validation of Risk-Option Relationships. MIS Quarterly, 30
6. Benbasat, I., Goldstein, D. K. and Mead, M. (1987). The Case Research Strategy in Studies of Information Systems. MIS Quarterly, 11, 369-386.
7. Benbasat, I. and Zmud, R. W. (1999). Empirical Research in Information Systems: The Practice of Relevance. MIS Quarterly, 23, 3-16.
8. Booz Allen Hamilton Inc. (2003). Shining the Light on Shadow Staff. Understanding and Minimizing Hidden Staff Costs. 1-8.
9. Boss, S. R., Kirsch, L. J., Angermeier, I., Shingler, R. A. and Boss, R. W. (2009). If someone is watching, I'll do what I'm asked : mandatoriness, control, and information security. European Journal of Information Systems, 18, 151-164.
10. Brown, C. V. and Magill, S. L. (1994). Alignment of the IS Functions with the Enterprise: Toward a Model of Antecedents. MIS Quarterly, 18, 371.
11. Cagemini (2011). Studie IT-Trends 2011 Unternehmen fordern wieder Innovation. Capgemini, 1-40.
12. Campbell, B. (2005). Alignment: Resolving ambiguity within bounded choices. In Pacific Asia Conference on Information Systems, 1-14.
13. Chan, Y. E. and Reich, B. H. (2007). IT alignment: what have we learned? Journal of Information Technology, 22, 297-315.
14. Chen, H.-M. (2008). Towards Service Engineering: Service Orientation and Business-IT Alignment. In Proceedings of the 41st Annual Hawaii International Conference on System Sciences (HICSS 2008), 114-114, Ieee.
15. Cleven, A. (2011). Exploring Patterns of Business-IT Alignment for the Purpose of Process Performance Measurement. In European Conference On Information Systems, 1-12.
16. Computer Security Institute (2011). CSI Computer Crime and Security Survey 2010/2011. Computer Security Institute, New York, 1-42.
17. Cooper, H. M. (1988). Organizing Knowledge Syntheses: A Taxonomy of Literature Reviews. Knowledge in Society, 1, 104-126.
18. D'Arcy, P. (2011). CIO strategies for consumerization: The future of enterprise mobile computing. Dell CIO Insight Series. Dell Inc., 1-15.
19. De Haes, S. and Van Grembergen, W. (2008). Analysing the Relationship Between IT Governance and Business/IT Alignment Maturity. In Hawaii International Conference on System Sciences, Proceedings of the 41st Annual, 428-428, IEEE.
20. De Haes, S. and Van Grembergen, W. (2009). An Exploratory Study into IT Governance Implementations and its Impact on Business/IT Alignment. Information Systems Management, 26, 123-137.
21. Denzin, N. K. (2009). The research act: a theoretical introduction to sociological methods. Aldine Transaction, New Brunswick, NJ.
22. Desisto, R. P. and Pring, B. (2011). Essential SaaS Overview and 2011 Guide to SaaS Research. Gartner, 1-16.
23. Earl, M. J. (1989). Management strategies for information technology. Prentice Hall.
24. Escherich, M. (2011). Search Analytics Trends: The Inevitable Consumerization of Corporate IT.Gartner, 1-5.
25. Good Technology (2011). Case Study of Napa Country. Good Technology, 1-3.
26. Henderson, J. C. and Venkatraman, N. (1993). Strategic alignment: Leveraging information technology for transforming organizations. IBM Systems Journal, 32, 4-16.
27. IDC (2011). Unisys Consumerization of IT Benchmark Study. UNiSYS, 1-38.
28. Jick, T. D. (2011). Mixing Qualitative and Quantitative Methods : Triangulation in Action. Administrative Science Quaterly, 24, 602-611.
29. Jones, D., Behrens, S., Jamieson, K. and Tansley, E. (2004). The Rise and Fall of a Shadow System: Lessons for Enterprise System Implementation. In ACIS'04, 1-12.
30. Krull, A. R. (1994). Strategic Misalignment - How organizations can survive information security. Computer Fraud & Security Bulletin, 11-19.
31. Levy, Y. and Ellis, T. J. (2006). A Systems Approach to Conduct an Effective Literature Review in Support of Information Systems Research. Informing Science Journal, 9, 181-212.
32. Loch, K. D., Carr, H. H. and Warkentin, M. E. (1992). Threats to Information Systems: Today's Reality, Yesterday's Understanding. Management Information Systems, 16, 173-186.
33. Luftman, J. (2000). Assessing Business Alignment Maturity. Communications of the Association for Information Systems, 4, 1-51.
34. Luftman, J. and Kempaiah, R. (2007). An Update on Business-IT Alignment: "A Line" Has Been Drawn. MIS Quarterly Executive, 6, 165-177.
35. Lyytinen, K. and Yoo, Y. (2001). The Next Wave of Nomadic Computing: A Research Agenda for Information Systems Research. 377-388.
36. Lyytinen, K. and Yoo, Y. (2002). Issues and Challenges in Ubiquitous Computing. Communications of the ACM, 45, 63-65.
37. Myyry, L., Siponen, M., Pahnila, S., Vartiainen, T. and Vance, A. (2009). What levels of moral reasoning and values explain adherence to information security rules? An empirical study. European Journal of Information Systems, 18, 126-139.
38. Palvia, P., Mao, E. and Midha, V. (2004). Research Methodologies in MIS: An Update. Communications of the Association for Information Systems, 14, 526-542.
39. Panko, R. R. (2006). Spreadsheets and Sarbanes-Oxley: Regulations, Risks, and Control Frameworks. Communications of the Association for Information Systems, 17, 1-50.
40. Ponemon, L. (2009). Trends in Insider Compliance with Data Security Policies. Ponemon Institute.
41. Prensky, M. (2001). Digital Natives, Digital Immigrants. On the Horizon, 9, 1-6.
42. Puhakainen, P. and Siponen, M. (2010). Improving Employees' Compliance Through Information Systems Security Training: An Action Research Study. MIS Quarterly, 34, 757-778.
43. Pyburn, P. J. (1983). Linking the MIS plan with corporate strategy: an exploratory study. MIS Quarterly, 7, 1-14.
44. Ramachandran, S., Rao, S. V. and Goles, T. (2008). Information Security Cultures of Four Professions: A Comparative Study. In HICSS 08, 1-10.
45. Reich, B. H. and Benbasat, I. (2000). Factors That Influence the Social Dimension of Alignment between Business and Information Technology Objectives. MIS Quarterly, 24, 81-113.
46. Robey, D. and Markus, M. L. (1998). Beyond rigor and relevance: producing consumable research about information systems. Information Resources Management Journal. Idea Group Inc.
47. RSA Security Inc. (2007). The Confessions Survey: Office Workers Reveal Everyday Behavior That Places Sensitive Information at Risk. RSA Security Inc., Bedford, MA (USA), 1-12.
48. Rusli, E. M. (2011). Wall Street's 'CrackBerry' Withdrawal. The New York Times, 1.
49. Sambamurthy, V. and Zmud, R. W. (1999). Arrangements for Information Technology Governance: A Theory of Multiple Contingencies. MIS Quarterly, 23, 261-290.
50. Sauvé, J., Moura, A., Sampaio, M., João, J. and Radziuk, E. (2006). An Introductory Overview and Survey of Business-Driven IT Management. In Business-Driven IT Management, 1-10, IEEE.
51. Smyth, K. and Freeman, J. (2007). Blue Prism Rogue IT Survey 2007. Blue Prism, 1-5.
52. Teo, T. S. H. and Ang, J. S. K. (1999). Critical success factors in the alignment of IS plans with business plans. International Journal of Information Management, 19, 173-185.
53. van Aken, J. E. (2004). Management Research Based on the Paradigm of the Design Sciences: The Quest for Field-Tested and Grounded Technological Rules. Journal of Management Studies, 41, 219-246.
54. Van der Zee, J. T. M. and Jong, B. d. (1999). Alignment is not enough: Integrating business and information technology management with the balanced business scorecard. Journal of Management Information Systems, 16, 137-156.
55. van Kessel, P. (2008). Moving beyond compliance. Ernst & Young's 2008 Global Information Security Survey. Ernst & Young, 1-34.
56. Warkentin, M. and Willison, R. (2009). Behavioral and policy issues in information systems security: the insider threat. European Journal of Information Systems, 18, 101-105.
57. Warkentin, M. E. (1995). Informations Systems Security and Privacy. In: Advances in Telematics. Volume 3 (Hanson, J. and Liebowitz, J., Eds), 57-79, Ablex Pub. Corp., Norwood, N.J.
58. Watt, N. and Schulze, T. A. (2011). County of Napa, State of California. Adopted Budget, Fiscal Year 2011/2012. County Executive Office, 1-862.
59. Webb, P., Pollard, C. and Ridley, G. (2006). Attempting to Define IT Governance: Wisdom or Folly? In Proceedings of the 39th Annual Hawaii International Conference on, 194a-194a, IEEE.
60. Webster, J. and Watson, R. T. (2002). Analyzing the Past to Prepare for the Future: Writing a Literature Review. MIS Quarterly, 26, xiii-xxiii.
61. Weill, P. and Ross, J. W. (2004). IT Governance. How Top Performers Manage IT Decision Rights for Superior Results. First edit. Harvard Business Press.
62. Wikipedia (2011). Napa County, California. Wikipedia, 1-15.
63. Yin, R. K. (2003). Case Study Research. Design and Methods. Third Edit. Sage Publications, Thousand Oaks, London, New Delhi.
64. Zafar, H. and Clark, J. G. (2009). Current State of Information Security Research In IS. Communications of the AIS, 24, 557-596.