Publication type: Conference paper
Type of review: Peer review (abstract)
Title: Assessing IT governance, risk management and compliance (IT GRC) - maturity : considering organisational and behavioural styles
Authors: Krey, Mike
Schlatter, Ueli
Proceedings: Proceedings of the 2nd International Conference on Management, Leadership and Governance
Conference details: International Conference on Management, Leadership and Fovernance, Wellesley, USA, 20-21 March 2014
Issue Date: 2014
Publisher / Ed. Institution: Academic Conferences and Publishing International Limited
Publisher / Ed. Institution: Reading
ISBN: 978-1-909507-98-2
ISSN: 1560-4683
Language: English
Subjects: IT GRC; Marurity model
Subject (DDC): 004: Computer science
658: General Management
Abstract: IT GRC is an approach that addresses not only the establishment of business rules, but, more importantly, how those rules are put forth into effective organisational structures and embedded into day-to-day business processes while considering organisation’s unique cultures, subcultures, and groups, which can possess their own attitudes and patterns of behaviour. This paper proposes a novel assessment model for the management of IT GRC with respect to closely-meshed organisational and social structures within enterprises and among their stakeholders. The assessment model contributes effectively to those rules are adopted into sensible organisational structures and embedded into day-to-day the planning and implementation of IT GRC initiatives by taking timely steps against the resistance of stakeholders toward change. The model user is provided with a loose enough approach to utilise individual strategies in dealing with established management and diverse behavioural styles. In order to make a profound statement about the value proposition of the new model and its related concepts, a case study from the Swiss hospital environment is presented.
Fulltext version: Published version
License (according to publishing contract): Licence according to publishing contract
Departement: School of Management and Law
Organisational Unit: Institute of Business Information Technology (IWI)
Appears in collections:Publikationen School of Management and Law

Files in This Item:
There are no files associated with this item.

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.