IT Governance Drivers of Process Maturity Roger Debreceny School of Accountancy Shidler College of Business Glen L Gray California State University at Northridge

2

Which comes first? 3

4

Research Questions 5 Dimensions of IT Governance Dimensions of Process Maturity Processes Maturity Time Alignment Structure Compliance

OK, LHS FIRST 6

Process maturity 7 Enterprise Architecture is what, exactly? Winning seven Tours is easy compared with getting to Level 5! The coach has a plan we follow in every game

Process Maturity We use  CobiT as the foundation for process definitions All 34 processes, from strategy to tactics to delivery  The CobiT implementation of CMM 8

Attributes Levels Generic Maturity Model

The Methodology-Process Maturity Identify process owner(s) for each of the 34 processes Meet with each of the process owners Introduce the control objectives behind each of the processes Ask them to self-assess maturity on each of the six dimensions of process maturity Each interview takes from 0.5  1.5hours From five to fifteen interviews per entity

NOW THE RHS 11

The Methodology-IT Governance Interview the CIO using structured questionnaire Assess all aspects of governance/environment Organization of IT Level of compliance Strategic importance of IT Technology Business/IT alignment Rate of change

The Study Large field study of 51 organizations  Medium size to very large International  Germany/Austria 14  USA17  Canada4  Singapore4  Mexico4  Philippines9

RESULTS 14

The Big Picture on the LHS POAIDSME

Data reduction prior to regression 16 Maturity 450+ data points Governance 250+ data points

RHS Variables 17 CENTRALCentralized IT organizations DECENTRALDecentralized IT organizations OUTSOURCELevel of outsourcing STRATEGYBusiness/IT alignment – “strategy” VISIONBusiness/IT alignment – “vision” RISKManagement of risk ENVIRONIT environment SIZESize: factorized from personnel, servers and clients. SWARESoftware complexity HWAREHardware complexity DEVTLevel of development of country

Results 18 CENTRALCentralized IT organizations DECENTRALDecentralized IT organizations OUTSOURCELevel of outsourcing STRATEGYBusiness/IT alignment – “strategy” VISIONBusiness/IT alignment – “vision” RISKManagement of risk ENVIRONIT environment SIZESize: factorized from personnel, servers and clients. SWARESoftware complexity HWAREHardware complexity DEVTLevel of development of country

19