Only 12% of firms haveadequate IT governancein place, says
a poll of 100 IT professionals.
The survey, by website IT
Governance, found that 12% of businesses take technology
seriously enough to operate
full board-level oversight of their IT resources.
Despite increasing compliance pressures under Sarbanes-Oxley,
the UK Combined Code, HIPAA and other regulatory regimes, boards
still appear to be lagging badly in implementing appropriate IT
governance measures, said IT Governance.
IT governance frameworks, such as ITIL, Cobit and ISO27001, also
appear to be used in less than 50% of organisations, revealed the
poll.
Although 16.5% of respondents reported that progress was being
made towards achieving IT governance, more than 50% indicated that
this was far from the case.
Respondents were similarly sceptical about the grasp that board
members have of technology's importance.
Less than 7% said that board members understood the risks posed
to business operations by information and IT systems. In contrast,
49% said this was not the case.