Framework-based ICT governance and survey in Northern Savonia

Abstract

The ICT governance function has three main tasks: evaluate, direct and monitor (EDM). We focused on four frameworks (ISO/IEC 38500, COBIT, ITIL and ICT Standard for Management) and analyzed on how the governance function is covered on them. The international standard for the corporate governance of information technology (ISO/IEC 38500) maps EDM to the principles, the Control Objectives for Information and Related Technology (COBIT) divides EDM into the processes and the IT infrastructure Library (ITIL) illustrates EDM as the activities. The ICT Standard for Management describes EDM implicitly. Based on the frameworks we designed the survey for assessing the ICT governance. The survey was sent to 331 respondents in Northern Savonia, of which 136 responded and 28 of these respondents were the members of the executive board. In this paper, we present the responses and analyze them by means of data analytics.