Analysis of IT Governance on Spanish Organizations - Enterprise Information Systems Design, Implementation and Management: Organizational Applications - page 442

Figure 3. Business operation as a discipline of
corporate governance (adapted from CIMA)

or developed in organizations with superior from
IT. This framework considers three different
aspects: the decision-making mechanisms and
structures, the alignment processes, and commu-
nication tools and approaches. This approach has
been complemented with the inclusion of the IT
engagement model and the different architecture
maturity stages.
Van Grembergen (Van Grembergen 2004),
proposed another different framework based on
three pillars: structures, processes and relational
mechanisms. And other institutions such as For-
rester (Symons 2005) also approached this subject
by suggesting best practices to implement IT Gov-
ernance. Most recently, there are two milestones to
be considered. First is the publication of the ISO/
IEC 38.500 (ISO 2008), covering IT Governance,
and based on the Australian standard. This docu-
ment is an effort to define a high level standard
to implement IT Governance in the organiza-
tions, defining six principles for good corporate
governance of IT, and expresses, as the standard
says, desirable behaviors for the decision making
process. This standard is a generic one, and there
are ongoing initiatives to deeply develop the six
principles through best practices.
Since the standard is generic, there is a need to
define and implement this standard on the differ-
ent organizations. This is when the Calder-Moir
IT Governance Framework (Calder 2007) comes.

point of view, IT Governance has released COBIT
version 4.1 (ITGovernanceInstitute 2007), which
covers IT governance from the performance
management perspective. This perspective is
complemented by the Val IT framework (ITGov-
ernanceInstitute 2006), which is more focused on
the value adding of IT to the business. And also,
more recently, the IT Governance Institute has
released the draft for managing Risk IT framework
(ITGovernanceInstitute 2009) covering the risk
dimension of IT governance (Figure 4)..
The approach of the Center for Information
Systems Research (Weill 2003; Ross 2006) is dif-
ferent, and is more in the opposite way: from the
reality, from what has been done in the companies
and organizations, the authors conceived a frame-
work to implement IT Governance, taking into
account the best practices that were implemented

Figure 4. IT Governance as a discipline of corporate governance (adapted from CISR)