SciELO - Scientific Electronic Library Online

vol.12 issue1Celebrity endorsements versus created spokespersons in advertising: A survey among studentsTheory building trends in international management research: An archival review of preferred methods author indexsubject indexarticles search
Home Pagealphabetic serial listing  

Services on Demand



Related links

  • On index processCited by Google
  • On index processSimilars in Google


South African Journal of Economic and Management Sciences

On-line version ISSN 2222-3436
Print version ISSN 1015-8812

S. Afr. j. econ. manag. sci. vol.12 n.1 Pretoria Apr. 2009




Using information technology governance, risk management and compliance (GRC) as a creator of business values - A case study



Osden Jokonya; Sam Lubbe

School of Computing, UNISA




The relationship between information technology (IT) governance, risk management and compliance (GRC) and organisation business values continues to interest academics and practitioners (IT Governance Institute, 2003). Like governance, risk management and compliance generally, IT GRC is about the decision rights and accountabilities that encourage desirable behaviour in the use of IT (IT Governance Institute, 2003). A case study approach was used in an organisation with many business units. The organisation selected is a mining company, RioZim, situated in Zimbabwe. Data was collected from business units on IT issues and business values. The interviews centred on the IT GRC practices based on responsibility and authority for IT decision-making. The results suggest that IT GRC does not adequately support business values. The study revealed that business values should drive IT GRC and IT GRC should be the responsibility of executives and all business units.

JEL L20, L86



“Full text available only in PDF format”




AGARWAL, R & SAMBAMURTHY, V (2002) "Principles and models for organizing the IT function", MIS Quarterly Executive, 1: 1-16.         [ Links ]

APPLEGATE, LM; MCFARLAN, FW & MCKENNEY, JL (1999) "Corporate Information Systems Management: Text and Cases" (5th ed.) Homewood, IL: Irwin.         [ Links ]

THE BOSTON CONSULTING GROUP (2004) "From IT complexity to commonality: Making your business more nimble", available online at: [accessed 22 September 2005].         [ Links ]

BROADBENT, M & WEILL, P (1997) "Management by maxim: How business and IT managers can create IT infrastructures," Sloan Management Review, 38(3): 77-92.         [ Links ]

BRYNJOLFSSON, E (1993) "The productivity paradox of information technology" Communications of the ACM, 36(12): 67-77.         [ Links ]

GHAURI, PN; GRONHANG, K & KRISTIANSLUND, I (1995) Research Methods in Business Studies, London: Prentice Hall.         [ Links ]

GULDENTOPS, E. (2003) Governing Information Technology through CobiT, Idea Group Publishing: Hershey, PA.         [ Links ]

GUPTA YP & RAGHUNATHAN TS (1989) "Impact of information systems steering committees on IS planning", Decision Sciences 20 (1989), pp. 777-793        [ Links ]

HAYNES, M & THOMPSON, S (2000) "The productivity impact of IT deployment: An empirical evaluation of ATM", Introduction Oxford Bulletin of Economics and Statistics, 62(5): 607-619.         [ Links ]

IT GOVERNANCE INSTITUTE (2003) Board Briefing on IT Governance (2nd ed.) available online at: ITGISearchDisplay.cfm [accessed 22 September 2005].         [ Links ]

IT GOVERNANCE INSTITUTE (2005b) "IT governance domain practices and competencies - Optimizing value creation from IT investment", available online at: http://www.itgi.org_Template_ITGI.cfm_Section=ITGI&Template=_ ContentManagement_ContentDisplay.pdf.pdf [accessed 04 December 2005]        [ Links ]

IT GOVERNANCE INSTITUTE (2005c) "IT governance domain practices and competencies - Measuring and demonstrating the value of IT", available online at: http://www.itgi.org_Template_ITGI.cfm_Section=ITGI&Template=_ ContentManagement_ContentDisplay.pdf [accessed 04 December 2005]        [ Links ]

MARCHAND, DA; KETTINGER, W & ROLLINS, JD (2000) "Information orientation: People, technology and bottom line', Sloan Management Review: 69-80.         [ Links ]

MCKENNA, R., (1997) Real-Time, Preparing For the Age of the Never Satisfied Customer, Boston: Harvard Business School Press.         [ Links ]

MORTON, MS (1991) The Corporation of the 1990s: Information Technology and Organizational Transformation, New York: Oxford University Press.         [ Links ]

PEPPARD, JW & WARD, JM (1999) "'Mind the gap': Diagnosing the relationship between the IT organization and the rest of the business", The Journal of Strategic Information Systems, 8: 29-60.         [ Links ]

PETERSON, RR; O'CALLAGHAN, R & RIBBERS, PMA (2000) "Information technology governance by design: Investigating hybrid configurations and integration mechanisms", proceedings of the 21st International Conference on Information Systems, Australia, Brisbane, Queensland, pp. 435-452.         [ Links ]

ROBSON, C. (2002) "Real World Research" (2nd ed.) Blackwell: Oxford.         [ Links ]

ROSS, JW & BEATH, CM (2002) "Beyond the business case: New approaches to IT investment", MIT Sloan Management Review, 43(2): 51-59,         [ Links ] [accessed 04 December 2005] .

ROSS, J & WEILL, P (2004), "Recipe for good governance," CIO Magazine, 15 June, available online at:        [ Links ]

SAUER, C & WILLCOCKS, LP (2002) "The evolution of the organizational architect", Sloan Management Review: 41-49.         [ Links ]

SAUNDERS, M; LEWIS, P & THORNHILL, A (2003) Research Methods for Business Students (3rd ed.) London: Prentice Hall.         [ Links ]

SILK, DJ (1991) Planning IT: Creating an Information Management Strategy, London: Butterworth-Heinemann.         [ Links ]

WARD, J & PEPPARD, J (2003) Strategic Planning for Information Systems (3rd ed.) Chichester: John Wiley & Sons Ltd.         [ Links ]

WEILL, P (2004) "Don't just lead, govern: How top performing firms govern IT", MIS Quarterly Executive, 8(1): 1-17.         [ Links ]

WEILL, P & VITALE, M (2002) "What IT infrastructure capabilities are needed to implement e-business models?", MISQ Executive (1:1): 17-34.         [ Links ]

YIN, RK (1994) Case Study Research (2nd ed.) Newbury Park, CA: Sage Publications.         [ Links ]

Creative Commons License All the contents of this journal, except where otherwise noted, is licensed under a Creative Commons Attribution License