Information Technology Governance in Small and Medium Enterprises - a Systematic Mapping

Abstract

Information Technology (IT) governance in small and medium-sized businesses is a subject that still requires more effort. Many of the studies that deal with this subject refer to large companies. IT governance structures, originally developed for the context of large enterprises such as COBIT, ISO/IEC 35800 or ITIL, when applied to the context of small and medium enterprises, lead to undesirable results and failures in the deployment process. The objective of this work was to perform a systematic mapping on IT governance in small and medium enterprises between 2007 and 2017. Systematic mapping studies are useful for categorizing and summarizing the existing information concerning a research question in an unbiased manner. Thus, from an initial set of 63 papers, a total of 17 research papers were selected for the mapping study. The results obtained allowed us to reach conclusions concerning the state-of-the-art of IT governance mechanisms, theories applied in the context and the consequences of IT governance. From the results of this study it was possible to perceive the low use of relational mechanisms of IT governance in the studied context, the constant need to adapt frameworks such as COBIT and ITIL, so that they can adapt to the reality of SMEs, the wide variety of theoretical approaches and the importance, for SMEs, of the concept of IT value for the business.

Optimization Algorithm to Sequence the Management Processes in Information Technology Departments

“…Recently, some authors have published some approaches to the topic of ITIL and small companies in terms of real cases or architectural or theoretical models [4,41,42].…”

“…In this scenario, the information technology (IT) managers are expected to offer the best service with very few resources (as few as possible) and to achieve the objectives on time, managing the risks with low cost and with the expected quality [3]. All this is possible only by using market standards [4] such as ITIL [5], Capability Maturity Model Improvement (CMMI), Control Objectives for Information and Related Technology (COBIT) [6] and the Committee Of Sponsoring Organizations (COSO) among others [7][8][9].…”

Decision archetypes in the information technology governance: Reflections concerning small and medium-sized enterprises

“…Embora relevante para a literatura de GTI, o estudo de Weill e Ross (2004) analisou apenas grandes empresas multinacionais, deixando uma lacuna no que concerne à definição dos arquétipos de decisão em GTI no cenário das Pequenas e Médias Empresas (PME) (Frogeri et al, 2019a;Min & Junhe, 2009;Silva, Dornelas, Silveira, & Lucena, 2019;Silva, Silveira, Dornelas, & Ferreira, 2020).…”

“…As diferentes características das PMEespecialmente no contexto das TIC (Neirotti, Raguseo, & Paolucci, 2018;Torrès & Julien, 2005) incentivam estudos voltados a compreender fenômenos observados em grandes organizações, mas que ainda estão em desenvolvimento nas PME (Frogeri et al, 2019c;Huygh & De Haes, 2016;Silva et al, 2020).…”

Implementación de ITIL versión 3 en las organizaciones: Razones del éxito y fracaso

“…Si bien es cierto, la influencia de las TIC es notoria, las organizaciones, tienen problemas relacionados con la inadecuada prestación de servicios de TI por el deficiente uso de las herramientas tecnológicas (Palacios-Osma et al, 2017). (da Silva et al, 2020;Eikebrokk & Iden, 2017) consideran que es fundamental elaborar estrategias para la prestación de servicios, desarrollando e implementando una infraestructura organizativa adecuada para dichos servicios de TI, como ITIL versión 3.…”