Enhancing the Quality of ICT Regulation in Iran: A Study on the Application of the COBIT IT Governance Framework
محورهای موضوعی : IT Strategy
Ehsan Baraty
1
,
Akbar Nabiollahi
2
,
Naser Khani
3
1 - Management Department, Najafabad Branch, Islamic Azad University, Najafabad, Iran
2 - Computer Engineering Faculty, Najafabad Branch, Islamic Azad University, Najafabad, Iran
3 - Management Department, Najafabad Branch, Islamic Azad University, Najafabad, Iran
کلید واژه: ICT Regulatory Tracker, COBIT Framework, ICT Regulation Quality, Digital Transformation,
چکیده مقاله :
This study explores the application of the COBIT (Control Objectives for Information and Related Technologies) IT governance framework to enhance the ICT Regulatory Tracker (ICTRT) scores, a tool developed by the International Telecommunication Union (ITU) to assess ICT regulatory bodies across countries. Given the absence of specific improvement strategies from the ITU, this research fills a critical gap by investigating how COBIT processes can be leveraged for ICT regulation improvement. Utilizing an Automatic Content Analysis (ACA) method, we identified significant relationships between 22 out of 37 COBIT processes and ICTRT indicators, with particular emphasis on APO09, APO11, and DSS02 processes. Focus group methodology employed to validate these findings and development of a continuous improvement plan tailored for Iran's ICT regulatory body. This plan integrates 13 COBIT processes from the identified set, providing a structured approach for implementation. The findings not only highlight effective COBIT processes but also offer actionable insights for regulatory bodies aiming to enhance their regulatory quality and advance towards a digital economy.
This study explores the application of the COBIT (Control Objectives for Information and Related Technologies) IT governance framework to enhance the ICT Regulatory Tracker (ICTRT) scores, a tool developed by the International Telecommunication Union (ITU) to assess ICT regulatory bodies across countries. Given the absence of specific improvement strategies from the ITU, this research fills a critical gap by investigating how COBIT processes can be leveraged for ICT regulation improvement. Utilizing an Automatic Content Analysis (ACA) method, we identified significant relationships between 22 out of 37 COBIT processes and ICTRT indicators, with particular emphasis on APO09, APO11, and DSS02 processes. Focus group methodology employed to validate these findings and development of a continuous improvement plan tailored for Iran's ICT regulatory body. This plan integrates 13 COBIT processes from the identified set, providing a structured approach for implementation. The findings not only highlight effective COBIT processes but also offer actionable insights for regulatory bodies aiming to enhance their regulatory quality and advance towards a digital economy.
[1] T. C. T. Kahorongo, N. Reddy, and A. M. Karodia, “The Adoption of Information Technology in the Governance System of the Bank of Namibia,” Business and Management Studies, vol. 1, no. 2, 2015, doi: 10.11114/bms.v1i2.876.
[2] ITU Publications, The impact of policies, regulation, and institutions on ICT sector performance. Geneve: ITU, 2021.
[3] GIRO, Global ICT Regulatory Outlook 2020 (GIRO 2020). Geneva: ITU, 2020.
[4] ISACA, “COBIT 2019 Framework: Introduction and Methodology, https://www.isaca.org/resources/cobit,” ISACA.
[5] H. Yeganeh, A. S. Mortazavi Kahangi, and A. Hadizadeh, “Identifying and analyzing macro actions in order to achieve regulatory goals in the country’s national information network,” Iranian Journal of Information Processing and Management, 2023.
[6] T. Olwal, M. Masonta, L. Mfupe, and M. Mzyece, “Broadband ICT policies in Southern Africa: Initiatives and dynamic spectrum regulation,” in 2013 IST-Africa Conference and Exhibition, IST-Africa 2013, IEEE Computer Society, 2013.
[7] K. B. Danbatta and T. Zangina, “Performance analysis of telecommunications regulations in Nigeria: A quality of service approach,” Dutse Journal of Pure and Applied Sciences, vol. 8, no. 1a, 2022, doi: 10.4314/dujopas.v8i1a.17.
[8] M. Suryanegara, “5G as disruptive innovation: Standard and regulatory challenges at a country level,” International Journal of Technology, vol. 7, no. 4, 2016, doi: 10.14716/ijtech.v7i4.3232.
[9] M. Mohlameane and N. Ruxwana, “Exploring the impact of cloud computing on existing South African regulatory frameworks,” SA Journal of Information Management, vol. 22, no. 1, 2020, doi: 10.4102/sajim.v22i1.1132.
[10] G. Maccani, N. Connolly, S. McLoughlin, A. Puvvala, H. Karimikia, and B. Donnellan, “An emerging typology of IT governance structural mechanisms in smart cities,” Gov Inf Q, vol. 37, no. 4, 2020, doi: 10.1016/j.giq.2020.101499.
[11] H. N. Nguyen, “Regulating Cyberspace in Vietnam: Entry, Struggle, and Gain,” Columbia Journal of Asian Law, vol. 35, no. 2, 2022, doi: 10.52214/cjal.v35i2.10028.
[12] I. A. Raifu, I. A. Okunoye, and A. Aminu, “The effect of ICT on financial sector development in Africa: does regulatory quality matter?,” Inf Technol Dev, 2023, doi: 10.1080/02681102.2023.2233458.
[13] S. Shrestha and D. Ram Adhikari, “Telecommunications Infrastructures and Services Development and Challenges in Nepal,” International Journal of Internet, Broadcasting and Communication, vol. 9, no. 2, pp. 27–36, 2017, [Online]. Available: https://doi.org/10.7236/IJIBC.2017.9.2.27.
[14] S. Adams and E. Akobeng, “ICT, governance and inequality in Africa,” Telecomm Policy, vol. 45, no. 10, 2021, doi: 10.1016/j.telpol.2021.102198.
[15] O. A. Shobande and L. Ogbeifun, “Has information and communication technology improved environmental quality in the OECD? —a dynamic panel analysis,” International Journal of Sustainable Development and World Ecology, vol. 29, no. 1, 2022, doi: 10.1080/13504509.2021.1909172.
[16] P. Chauhan and J. Mathew, “Evolution and Regulation of Telecommunication and Internet in India: A Study of the Policy governing the development of telecommunication and Internet in India,” Revista de Direito, Estado e Telecomunicacoes, vol. 15, no. 1, pp. 225–255, May 2023, doi: 10.26512/lstr.v15i1.45322.
[17] M. Nikarya, M. Mazoochi, A. M. Montazeri, and F. Ayazi, “Investigating the Relationship between Regulatory Promotion Indicators and ICT Development,” Iranian Journal of Information Management, vol. 6, no. 2, pp. 47–66, 2021, doi: 10.22034/aimj.2021.132967.
[18] M. Fasanghari, M. S. Amalnick, R. T. Anvari, and J. Razmi, “A robust data envelopment analysis method for business and IT alignment of enterprise architecture scenarios,” Journal of Information Systems and Telecommunication, vol. 1, no. 2, 2013, doi: 10.7508/jist.2013.02.004.
[19] K. Bamary, M. R. Behboudi, and T. Abbasnejad, “An ICT Performance Evaluation Model based on Meta-Synthesis Approach,” Journal of Information Systems and Telecommunication, vol. 10, no. 39, 2022, doi: 10.52547/jist.16445.10.39.229.
[20] S. Chege, G. Wanyembi, and C. Nyamboga, “The Relationship Between the Business-IT Alignment Maturity and the Business Performance for the Banking Industry in Kenya,” International Journal of Scientific and Technical Research in Engineering, vol. 3, no. 7, 2018.
[21] A. Abu-Musa, “Exploring the importance and implementation of COBIT processes in Saudi organizations: An empirical study,” Information Management & Computer Security, vol. 17, no. 2, 2009, doi: 10.1108/09685220910963974.
[22] D. Henriques, R. Almeida, R. Pereira, M. M. da Silva, and I. S. Bianchi, “How IT governance can assist iot project implementation,” International Journal of Information Systems and Project Management, vol. 8, no. 3, 2020, doi: 10.12821/ijispm080302.
[23] I. G. Almusawi, “USING COBIT FRAMEWORK FOR REDUCING THE AUDIT RISKS OF ACCOUNTING INFORMATION SYSTEMS,” Akkad Journal Of Contemporary Accounting Studies, vol. 1, no. 1, 2022, doi: 10.55202/ajcas.v1i1.18.
[24] A. Ilmudeen and B. H. Malik, “A Review of Information Technology Governance, Business Strategy and Information Technology Strategy,” 2016.
[25] A. Badran, “Developing Smart Cities: Regulatory and Policy Implications for the State of Qatar,” International Journal of Public Administration, vol. 46, no. 7, 2023, doi: 10.1080/01900692.2021.2003811.
[26] H. F. Hsieh and S. E. Shannon, “Three approaches to qualitative content analysis,” Qual Health Res, vol. 15, no. 9, 2005, doi: 10.1177/1049732305276687.
[27] S. E. Baker and R. Edwards, “How many qualitative interviews is enough ?,” National Centre for Research Methods Review Paper, 2012, doi: 10.1177/1525822X05279903.
[28] K. A. Neuendorf, The Content Analysis Guidebook. 2020. doi: 10.4135/9781071802878.
[29] P. Stockwell, R. M. Colomb, A. E. Smith, and J. Wiles, “Use of an automatic content analysis tool: A technique for seeing both local and global scope,” International Journal of Human-Computer Studies, vol. 67, no. 5, 2009, doi: 10.1016/j.ijhcs.2008.12.001.
[30] M. Scharkow, “Content Analysis, Automatic,” in The International Encyclopedia of Communication Research Methods, Wiley, 2017, pp. 1–14. doi: 10.1002/9781118901731.iecrm0043.
[31] Janusz Kacprzyk, Standardisierte Inhaltsanalyse in der Kommunikationswissenschaft – Standardized Content Analysis in Communication Research. Warsaw, Poland: Springer Publications, 2023. doi: 10.1007/978-3-658-36179-2.
[32] H. Ahangarbahan and G. A. Montazer, “A fuzzy approach for ambiguity reduction in text similarity estimation (Case study: Persian web contents),” Journal of Information Systems and Telecommunication, vol. 3, no. 4, 2015, doi: 10.7508/jist.2015.04.002.
[33] E. F. McQuarrie and R. A. Krueger, “Focus Groups: A Practical Guide for Applied Research,” Journal of Marketing Research, vol. 26, no. 3, 1989, doi: 10.2307/3172912.
[34] M. Bloor, J. Frankland, M. Thomas, and K. Robson, Focus Groups in Social Research. 2012. doi: 10.4135/9781849209175.
[35] V. Braun and V. Clarke, “Using thematic analysis in psychology, Qualitative Research in Psychology,” J Chem Inf Model, vol. 3, no. 2, 2008.
[36] J. Grimmer and B. M. Stewart, “Text as data: The promise and pitfalls of automatic content analysis methods for political texts,” Political Analysis, vol. 21, no. 3, 2013, doi: 10.1093/pan/mps028.
[37] S. Harguem, “A conceptual framework on IT governance impact on organizational performance: A dynamic capability perspective,” 2021. doi: 10.36941/ajis-2021-0012.
[38] A. C. Amorim, M. Mira da Silva, R. Pereira, and M. Gonçalves, “Using agile methodologies for adopting COBIT,” Inf Syst, vol. 101, 2021, doi: 10.1016/j.is.2020.101496.
