Abstract
Information communication technologies (ICTs) have become an indispensable asset in the university environment. However, processes regarding ICT acquisition have become complicated as adoption of ICTs brings with it ICT risks, requiring ICT governance. ICT governance in a developing economy university context has not received much attention. Therefore, the objective of this present study is to investigate ICT governance implementation practices at a university in South Africa, in accordance with the traditional ICT governance model. The research followed quantitative research methods, to purposively sample forty academic and ICT decision-makers. Data collected were analyzed using descriptive statistics and frequency counts. Findings reveal existence of ICT governance in the university and an ICT governance implementation approach that is based on pragmatism, practicality, and prioritization mechanisms. Despite the availability of expensive, complex, and sophisticated ICT governance standards and frameworks on the market, the university implements ICT governance through controls that address the most critical ICT threats and risks to the university environment. This study suggests that the risk-based approach to ICT governance be advanced, as it strikes a balance between resource expenditure and risk management. Customized ICT frameworks and solutions need to be availed for implementation in public institutions like universities, as their operating environment and operational risks are unique.
Author’s contribution
J.M is the individual author of this study manuscript.
Competing interests
The researcher hereby acknowledges that there are zero financial or individual associations that may have improperly prejudiced him in writing this research article.
Data availability
Data that sustain the discoveries of this research are obtainable from the author, J.M, upon rational request.
Disclaimer
Sentiments and interpretations articulated in the manuscript are the author’s, and not a representation of policy or standing of any associated agency of the author.
Disclosure statement
No potential conflict of interest was reported by the author.
Ethical considerations
This manuscript is guided by all ethical etiquettes for enquiry with no direct contact with human beings or animals.
Additional information
Funding
Notes on contributors
John Mangundu
Dr John Mangundu obtained his PhD in Information Systems and Technology in 2017 at University of KwaZulu-Natal, South Africa. He is currently an Information Technology lecturer at the Durban University of Technology where he teaches Information Technology and Computer Applications Technology. He has presented papers at local conferences as well as supervision of post-graduate students.