EDGE, May/June 2006, Vol. 5, No. 3

IT governance efforts no longer a priority

A survey of senior decision-makers puts security and compliance well behind staffing issues on the to-do list
5/25/2006 8:23:00 AM By: Neil Sutton

An IT Governance Institute survey of C-level executives indicates that security and compliance issues have moved to the bottom of the pile, as far as IT is concerned.

The study is the result of about 700 interviews with CEOs and CIOs in 22 countries. According to their responses, staffing and ROI issues rank at the top, while IT transparency issues and outsourcing concerns are in the middle of the pack.

According to the accompanying report published by the institute, these results may be a surprising, but could “reflect the results of the recent significant efforts put into IT security projects and compliance programmes (e.g. Sarbanes-Oxley in the U.S.).”

In other words, enterprises have already expended money and effort in creating IT solutions and may be satisfied that they are addressing security and compliance concerns. Another explanation may be the group that was targeted by the survey, said Michael Cangemi, editor-in-chief of IS Control Journal and a past president of the Information Systems and Control Association.

“Those guys are more worried about the business, they're more worried about return on investment. That's why staffing comes up (as a top priority): they probably can't find the people,” he said. “That's what most business leaders are concerned about; making money.”

But governance and compliance issues should be top of mind within any organization, said Barry Saunders, an audit associate in the Auditor General's office in Winnipeg and chair of the Winnipeg chapter of ISACA.

share: