M. Kathryn Brohman

Controlling information systems development: a new typology for an evolving field

This study explores how and why information systems development (ISD) approaches differ in their tactics to control the behaviour of development teams. Drawing from prior research on organisational control, we conduct qualitative case studies at four organisations to examine the extent that traditional and contemporary systems development approaches can highlight a unique combination of control attributes. Based on the data collected, we build an ISD control typology that differentiates ISD approaches on the basis of control objectives (product or process focused) and control practices (preventive or detective/corrective focused). The proposed typology can be used by practitioners to inform and guide more effective systems development control choices while providing researchers with a new model that recognises the unique control aspects of todays systems development approaches.

Hitting a moving target: a process model of information systems control change

Controls are widely regarded as a key factor in driving high performing organisational processes. However, because of ongoing changes within information systems (IS) processes, control modifications are commonly required in order to maintain performance levels. Although past research recognises the ongoing benefits derived from successful control changes, there is a limited understanding of the actual steps taken by organisations, particularly with regard to avoiding negative performance implications such as process delays or employee resistance. This research draws on empirical data from six case studies to propose a new process model that depicts the interconnected steps involved in control changes. Our findings suggest that the sources of IS control change may be more diverse than most past research suggests and that control changes within non‐project‐oriented processes (e.g. enterprise architecture) present additional challenges in comparison to project‐oriented processes (e.g. systems development). Insights from this research can aid practitioners in streamlining control changes as a means to improve effectiveness, whilst also contributing to research by uncovering an enhanced understanding of why and how control changes are made in IS processes.

Information systems control alignment

This study presents a new concept called information systems control alignment, which examines the degree that the underlying characteristics of four main information systems (IS) control dimensions are mutually complementary. Using three case studies, our research uncovers two high-functioning control patterns - one with traditional characteristics and one with agile characteristics - that demonstrate positive alignment among the control environment, control mechanisms, socio-emotional behaviors, and execution of controls. By better understanding the circumstances that contribute to control conflicts, organizations can be increasingly mindful of cultivating a complementary relationship among the control dimensions when designing, implementing, monitoring and adjusting controls within IS processes.

Addressing the Control Challenges of the Enterprise Architecture Process

ABSTRACT:  This paper examines the enterprise architecture process from the perspective of information systems controls, which refer to attempts to influence the behavior of employees in order to achieve organizational goals. Although controls have been extensively studied in processes such as systems development, there is little research examining control within the enterprise architecture process, despite its rising importance in todays organizations. This paper examines how enterprise architecture controls are employed in practice and considers the challenges faced in their design and operation. Drawing on empirical data from two in-depth case studies, enterprise architecture controls are classified and analyzed using COBIT 5. Our findings identify a series of specific challenges with enterprise architecture controls. Based on these challenges, we outline recommendations to practitioners in overseeing the enterprise architecture process and develop propositions to help guide future research initiative...