Analysis of IT Governance on Spanish Organizations - Enterprise Information Systems Design, Implementation and Management: Organizational Applications - page 452

Figure 21.Project approval on IT

Figure 22.Other management practices on the organization

Figure 23.IT risk management areas

the organization (Figure 18). Regarding decision
making mechanisms, the results are showing that
the decision is taking at the manager/MDO level,
and also on the vice-manager. It is important to
notice that here appears the board of directors,
who makes the decision in two SMOs (Figure 19).
Interestingly, regarding accountability of the
decisions, there is a slight difference and now the
board is accountable of the decision taken in one
small company (Figure 20).

Managing Practices

And, lastly, the authors wanted to know
if the company is managing somehow the IT
risks(Figure 23), and what type of risks. The risk
managed is regarding business continuity (back-
up and recovery, mainly) and also security. Legal
and compliance aspects are important, where also
important in terms of compliance with legislation
about the information stored.

In terms of managing the different initiatives of
IT, the research distinguished between the tools
that the companies have implemented for project
approval, and the status of some project manage-
ment practices on the organizations .
Figure 21 indicates that companies used to
identify costs and benefits (both tangible and
intangible) when analyzing the approval of IT
initiatives. And regarding management practices,
the companies have knowledge of schedule, costs
and problems in on-going IT projects or initiatives
(Figure 22).

concLusion

Although the research, in terms of incorporating
more organizations and refining the information,
will continue, the information gathered gives a