The value of context awareness within information technology audit and governance

Abstract

A shared common understanding or context awareness (CA) of IT Audit and Governance among all the internal stakeholders of a business remains an important factor. This context awareness is needed between the business itself, the IT department, and the Audit and Risk functions of the business. The research problem states that there is a lack of shared context awareness among all stakeholders when conducting IT audits and implementing IT Governance. To answer the research questions, a case study research strategy was followed using an International Services Group of companies operating from South Africa. The case study offered a diverse group of companies and vast experience in the South African Services, Trading, and Distribution sector. The diversity of this group of companies made it a perfect candidate for understanding context and the value of context in IT when conducting IT audits. The following research questions were asked: i) What are the factors affecting a shared context understanding among the stakeholders when conducting IT audits and implementing IT Governance? ii) How can a shared context understanding among stakeholders be achieved when conducting IT audits and implementing IT Governance? The aim of the study was to explore the value of context awareness within IT Audit and Governance in order to identify the value of shared context understanding. Data collection was done by means of interviews using semi-structured questionnaires and an interview guide. Qualitative data analysis techniques were adopted for this research. The conclusion of the study highlights the importance of a collective understanding of the business’s context in order to obtain alignment in business, IT, and Audit. It refers to the same or a similar understanding of the business processes; this takes time and is unique on all levels.