IT Governance Limited polled opinions of almost 100 technology and compliance professionals on a range of IT governance issues. Results found that only 12 percent of businesses take technology seriously enough to operate full board-level oversight of their IT resources, according to new research from IT Governance Limited. Despite increasing compliance pressures under Sarbanes-Oxley, the UK Combined Code, HIPAA and other regulatory regimes, boards still appear to be lagging badly in implementing appropriate IT governance measures. IT governance frameworks also appear to be used in less than 50 percent of organizations.


Despite the critical importance of technology to most organizations, only 12 percent said that IT governance was important in their organizations and that board-level IT oversight committees existed. While a further 16.5 percent reported that progress was being made towards achieving this, more than 50 percent indicated that this was far from the case.


Respondents were similarly sceptical about the grasp that board members have of technology’s importance. Less than 7 percent said that board members understood the risks posed to business operations by information and IT systems. In contrast, 49 percent said this was not the case, with over 22 percent stating this emphatically.


Over 57 percent said that directors and officers failed to understand the age and health of the current IT portfolio and the business implications of deferring maintenance. Meanwhile, less than 37 percent said that IT governance frameworks were integrated with their company’s enterprise risk management regime, with less than 7 percent saying that this was achieved fully.


Asked if their companies used standard IT governance frameworks, such as ITIL, CoBIT, ISO17799 or PMBOK, 9 percent said yes, and 19 percent said that good progress was being made towards this. However, over 21 percent said such frameworks were used only occasionally, and fully 30 percent indicated that they were not used at all.


More information is available at

Register or login for access to this item and much more

All Information Management content is archived after seven days.

Community members receive:
  • All recent and archived articles
  • Conference offers and updates
  • A full menu of enewsletter options
  • Web seminars, white papers, ebooks

Don't have an account? Register for Free Unlimited Access