Information Systems Strategy & IT Governance • Interactive Study Guide 2026
Focus: Governance & Controls
Best For: Compliance, bridging business-IT gap
Key Question: WHAT to do?
Focus: Service Management
Best For: IT Operations, service desk
Key Question: HOW to do it?
Focus: Security
Best For: Data protection
Key Question: Is it SECURE?
Focus: Higher Education
Best For: Universities
5 Perspectives: Governance, Management, Resources, Structures, Services
Be the LOWEST-COST producer targeting broad market
Examples: Walmart, Xiaomi, Southwest AirlinesOffer UNIQUE product/service targeting broad market
Examples: Apple, Mercedes-Benz, StarbucksTarget SPECIFIC market segment (cost or differentiation)
Examples: Rolls-Royce, CAT phonesWhen to use: Fast-changing industries where advantages are TEMPORARY
Resources needed to derive value from primary IT investment. Technology alone NEVER delivers value without these!
Click to flip
(a) Explain the difference between IT Governance and IT Management with examples. (10 marks)
IT Governance focuses on WHAT decisions need to be made and WHO makes them. It is a Board-level responsibility concerned with:
IT Management focuses on HOW to implement decisions. It is an operational responsibility concerned with:
(b) Draw and explain the 5 IT Governance Focus Areas. (10 marks)
The 5 Focus Areas work together in a continuous cycle:
(c) Describe the IT Maturity Levels (0-5). (5 marks)
| Level 0 | Non-existent - Complete lack of processes |
| Level 1 | Initial/Ad Hoc - Unpredictable, reactive, fire-fighting |
| Level 2 | Repeatable - Processes repeat but not documented |
| Level 3 | Defined - Documented, standardized, communicated |
| Level 4 | Managed - Measured using KPIs, quantitative control |
| Level 5 | Optimized - Continuous improvement, automated best practices |
(a) Compare COBIT, ITIL, and ISO 27001 frameworks. (12 marks)
| Framework | Focus | Best For | Key Question |
|---|---|---|---|
| COBIT | Governance & Controls | Compliance, bridging business-IT gap | WHAT to do? |
| ITIL | Service Management | IT Operations, service desk | HOW to do it? |
| ISO 27001 | Security | Data protection, compliance | Is it SECURE? |
(b) Explain why universities need special IT governance frameworks like JISC. (8 marks)
Universities differ from commercial organizations in three key ways:
JISC's 5 Perspectives:
(c) Describe the 5-phase ITG implementation process. (5 marks)
(a) Draw and explain the IS Strategy Triangle. (12 marks)
Key Concept: Business Strategy DRIVES both Organizational and IS Strategy. All three must be aligned.
(b) Identify symptoms of poor IT-Business alignment. (8 marks)
(c) Explain Luftman's 6 Components of Maturity. (5 marks)
(a) Explain Porter's 3 Generic Strategies with examples. (10 marks)
Be the LOWEST-COST producer in the industry, targeting broad market
Examples: Walmart (retail), Xiaomi (phones), Southwest AirlinesOffer UNIQUE product/service valued by customers, targeting broad market
Examples: Apple (premium design), Mercedes-Benz (luxury), Starbucks (experience)Target SPECIFIC market segment with cost focus or differentiation focus
Examples: Rolls-Royce (luxury cars), CAT phones (rugged phones for construction)(b) Explain Hypercompetition and the 'Destroy Your Business' concept. (8 marks)
Hypercompetition: Markets where competitive advantages are TEMPORARY and rapidly eroded. Winners must constantly disrupt themselves.
Key Characteristics:
Destroy Your Business (DYB): Strategic approach where companies disrupt their OWN products before competitors do.
(c) Explain Complementary Assets and the Managerial Levers Framework. (7 marks)
Complementary Assets: Resources needed to derive value from primary IT investment. Technology alone NEVER delivers value!
Managerial Levers Framework: Three types of variables to execute strategy:
(A) Explain the Strategic Alignment Model (SAM) by Henderson & Venkatraman using its four domains. (5 Marks)
The SAM Model has four domains:
Key Concept: Alignment requires fitting these four domains together - both Strategic Fit (external vs internal) and Functional Integration (business vs IT).
(B) List four (4) of Luftman's six components for assessing IT maturity and explain one. (4 Marks)
Luftman's 6 Criteria:
(C) An organization has "processes that are documented, communicated, and institutionalized, but lacks automated continuous improvement."
(i) Identify the Maturity Level. (2 Marks)
(ii) Compare this level with Level 5 (Optimized). (4 Marks)
(i) Level 3 (Defined) - Processes are documented and standardized.
| Aspect | Level 3 (Defined) | Level 5 (Optimized) |
|---|---|---|
| Processes | Documented, standardized | Automated, continuously improved |
| Measurement | Qualitative | Quantitative feedback loops |
| Improvement | Periodic reviews | Continuous, proactive optimization |
| Best Practices | Followed manually | Automated and integrated |
(D) Critically analyze the "Strategic Partner" stage. How does IT budget perception change from "Technology Provider"? (6 Marks)
| Aspect | Technology Provider | Strategic Partner |
|---|---|---|
| IT Budget View | Expense to CONTROL | Investment to MANAGE (ROI focus) |
| IT Role | Cost center, technical support | Inseparable from business strategy |
| IT Managers | Technical experts | Business leaders at executive table |
| Focus | Infrastructure efficiency | Business value creation & growth |
(E) "IT Strategic alignment is not a one-time event but a continuous process." Discuss. (4 Marks)
Alignment is a moving target because external factors constantly change:
(A) Differentiate between COBIT and ITIL. (4 Marks)
| Aspect | COBIT | ITIL |
|---|---|---|
| Focus | Governance & Control | Service Management |
| Answers | "WHAT you should be doing" | "HOW to do it" |
| Domain | Risk, Objectives, Compliance | Processes, Helpdesk, ITSM |
| Best For | Bridging business-IT gap | IT Operations excellence |
(B) Why might standard commercial frameworks not fit universities? List JISC's 5 perspectives. (5 Marks)
Why Universities Need Special Frameworks:
JISC's 5 Perspectives:
(C) Using the ITG Focus Area Diagram, explain the relationship between Strategic Alignment, Risk Management, and Value Delivery. (6 Marks)
The Cycle:
Strategic Alignment (IT supports business goals) -> drives -> Value Delivery (IT delivers benefits/ROI)
Risk Management ensures these values are delivered SECURELY and without disaster
Relationship:
(D) Describe "Situational Analysis" phase and why Gap Analysis is critical. (5 Marks)
Situational Analysis: Documents the "As-Is" (current) state vs. the "To-Be" (future) state.
Why Gap Analysis is Critical:
(E) Identify three (3) KPIs for measuring ITG implementation success. (5 Marks)
Other valid examples: IT spend as % of revenue, incident resolution time, security breach frequency
(A) State the six (6) Strategic Business Objectives for IS investment. (6 Marks)
(B) What happens if Business Strategy changes but Organizational Strategy doesn't update? (6 Marks)
Result = FAILURE:
(C) Explain how "Decision Rights" and "Incentives/Rewards" from Managerial Levers Framework ensure IS strategy execution. (6 Marks)
Decision Rights (Organizational Variable):
Incentives/Rewards (Control Variable):
(D) Differentiate Complementary Assets from IT Assets. Why does hardware alone fail? (7 Marks)
| IT Assets | Complementary Assets |
|---|---|
| Hardware, software, networks | Training, processes, culture |
| Tangible technology investments | Organizational + Managerial + Social capital |
| Can be purchased | Must be developed over time |
Why Hardware Alone Fails:
(A) Apply Porter's Model to Automotive/Smartphone Industry with examples. (5 Marks)
Smartphone Industry Examples:
| Strategy | Company | How? |
|---|---|---|
| Cost Leadership | Xiaomi, OnePlus | Good specs at lowest price, efficient manufacturing |
| Differentiation | Apple iPhone | Premium design, ecosystem, status symbol, unique experience |
| Focus (Niche) | CAT Phones | Rugged phones for construction workers |
Automotive Industry:
(B) Explain "Destroy Your Business" (DYB). Why would Apple cannibalize the iPod? (6 Marks)
Destroy Your Business (DYB): A strategy where firms disrupt their OWN business model before competitors do.
Why Companies Self-Cannibalize:
(C) Describe two characteristics of hypercompetitive industries. How do IS help companies survive? (6 Marks)
Characteristics of Hypercompetition:
How IS Helps Survival:
(D) Describe the main output of the Direction Phase (Strategy Formulation). (8 Marks)
Direction Phase Output = IS Strategic Plan containing:
Key Question Answered: "Where do we want to be?"
This sets the high-level direction BEFORE detailed project planning begins in the Implementation phase.
(A) Differentiate between IT Governance and IT Management. (4 Marks)
Reading: Introduction to IT Governance slides
(B) Draw the Evolution of IT Functions diagram and explain Technology Provider to Strategic Partner transition. (6 Marks)
Reading: Evolution of IT within organisations slide
(C) Using the IT Governance Focus Area diagram, explain how the five domains create stakeholder value. (8 Marks)
Reading: Focus areas of IT governance slide
(D) Define IT Maturity and list the six levels (0-5). Give one characteristic of "Optimized". (7 Marks)
Definition: Measure of how well processes and strategic alignment are defined, managed, and controlled.
Levels: 0-Non-existent, 1-Initial/Ad Hoc, 2-Repeatable, 3-Defined, 4-Managed, 5-Optimized
Optimized Characteristic: Best practices are followed AND automated; continuous improvement based on quantitative feedback.
Reading: IT Maturity Levels slides
(A) List three reasons why universities need specific IT governance frameworks. (3 Marks)
Reading: ITG frameworks for universities slides
(B) JISC Framework: (i) Identify 5 perspectives. (ii) Explain two perspectives. (6 Marks)
(i) Perspectives: Governance, Management, Resources, Structures, Services
(ii) Examples:
Reading: JISC Framework slides
(C) Identify four key stakeholders in university IT governance and explain IT Steering Committee role. (6 Marks)
Stakeholders: Students, Academics/Faculty, Government/Ministry/UGC, IT Vendors/Administrators
Steering Committee Role: Oversees IT strategy implementation, ensures alignment with institutional goals, approves significant investments, represents all stakeholders in decision-making.
Reading: ITG frameworks for specific organizational requirements
(D) Describe Situational Analysis phase and why "As-Is" state is critical before "To-Be". (10 Marks)
Situational Analysis: Documents "Where are we today?" Includes:
Why Critical:
Reading: IS Strategy Planning slides, Situation Analysis
(A) State the six Strategic Business Objectives driving IS investment. (6 Marks)
Reading: Role of IS in today's business slides
(B) Explain IS Strategy Triangle with diagram. How does Business Strategy change impact others? (8 Marks)
Business Strategy DRIVES both others. A change (e.g., going global) requires:
Reading: Linking systems to strategy, IS Strategy Triangle
(C) Compare Vision and Mission statements. (5 Marks)
| Aspect | Vision | Mission |
|---|---|---|
| Focus | Future-oriented | Present-oriented |
| Question | "Where are we going?" | "What do we do?" |
| Nature | Aspirational | Operational |
| Example | "To be most admired..." | "Committed to bringing..." |
Reading: Vision/Mission slides
(D) Explain Complementary Assets and why technology alone doesn't guarantee returns. (6 Marks)
Definition: Assets required to derive value from primary investment. Categories:
Why Technology Alone Fails: Without training staff or redesigning processes, new hardware will not increase productivity. Technology is just one piece of the puzzle.
Reading: Complementary assets slides
(A) Define Porter's Model. Differentiate Cost Leadership vs. Differentiation. (5 Marks)
Model: Framework for sustainable competitive advantage through strategic positioning.
Reading: Generic Strategies Framework slides
(B) Hypercompetition: (i) Explain the model. (ii) Discuss Moves and Countermoves. (8 Marks)
(i) Model: Applies to turbulent environments where advantages are short-lived. Agility and speed are key, not static positioning.
(ii) Moves/Countermoves:
Reading: Hypercompetition Model slides
(C) Apply Managerial Levers Framework. Explain Organizational, Control, Cultural variables. (6 Marks)
Framework: Used to execute organizational strategy effectively.
Reading: The Managerial Levers slides
(D) Describe Strategy Formulation vs. Strategy Implementation phases. (6 Marks)
| Phase | Focus | Output |
|---|---|---|
| Strategy Formulation | "Where do we want to be?" | IS Vision, Mission, Goals |
| Strategy Implementation | "How do we get there?" | Roadmap, Projects, Budget, Business Case |
Reading: Phases of the planning process slides
(A) State four (4) symptoms of poor IT alignment. (4 Marks)
(B) Define IT maturity. (3 Marks)
IT maturity refers to the degree to which an organization has defined, managed, and optimized its processes, particularly regarding the strategic alignment of IT with business goals. It involves measuring current performance and identifying what must be done to improve, using metrics to determine the level of governance and alignment.
(C) Explain the stages of IT maturity and characteristics of each stage. (6 Marks)
| Level | Name | Characteristics |
|---|---|---|
| 0 | Non-existent | No processes, no top management involvement |
| 1 | Initial/Ad Hoc | Disorganized, case-by-case, reactive, limited measurement |
| 2 | Repeatable | Practices occur but depend on individuals, not formal |
| 3 | Defined | Processes documented, standardized, institutionalized |
| 4 | Managed | Monitored with KPIs, business outcomes, balanced scorecards |
| 5 | Optimized | Best practices automated, continuous improvement, proactive |
(D) Discuss the evolution of IT functions with diagram. (6 Marks)
(E) Assess the impact of external environment on IT governance strategies. (6 Marks)
External environment heavily influences IT governance:
ITG must ensure systems are flexible enough to support rapid "moves and countermoves"
(A) List three (3) ITG frameworks. (3 Marks)
(B) Discuss two risks of lacking structured ITG framework. (3 Marks)
(C) Evaluate impact of 3 organizational factors on framework selection. (6 Marks)
(D) Justify why stakeholder involvement is crucial in framework selection. (6 Marks)
Stakeholder involvement is critical because IT governance is a shared responsibility aimed at maximizing business value for all parties.
(E) Provide implementation plan overview for ITG framework. (7 Marks)
(A) State main components of a Business Strategy Plan. (5 Marks)
(B) Explain the ever-increasing importance of IS in modern organizations. (6 Marks)
IS has moved from support role to central strategic enabler:
(C) Explain differences between Vision and Mission statements. (6 Marks)
| Aspect | Vision | Mission |
|---|---|---|
| Focus | Future, aspirational ("Where are we going?") | Present, operational ("What do we do?") |
| Timeframe | Long-term (5-10 years) | Current state |
| Content | Ambition, hope, ultimate achievement | Business definition, purpose, stakeholders |
| Example | "To be most admired company..." | "We provide cloud computing services..." |
(D) Describe the IS Strategy Triangle with diagram. (8 Marks)
Key Relationships:
(A) Explain Porter's Competitive Advantage model with examples. (5 Marks)
Porter's model: Firms achieve sustainable competitive advantage through strategic positioning:
(B) Examine benefits of social business strategies. (6 Marks)
Social IT aligned with organizational strategy offers:
(C) Are IS Strategies critical for dynamic environments? Justify using appropriate model. (8 Marks)
Yes, IS strategies are critical in dynamic environments.
Hypercompetition Model Justification:
Role of IS:
(D) Discuss the 3 phases of strategic planning process. (6 Marks)
| Phase | Question | Activities |
|---|---|---|
| 1. Situation Analysis | "Where are we today?" | SWOT Analysis, document internal/external environment, benchmark capabilities |
| 2. Strategy Formulation | "Where do we want to be?" | Define IS vision, mission, goals; translate future vision into IS strategies |
| 3. Strategy Implementation | "How do we get there?" | Define projects, create roadmap, summarize costs, develop business case |
Visual diagrams, key concepts, and everything you need to ace your exam
THE BALANCE RULE: If you change ONE corner, you MUST adjust the other two!
Example: Tesla's "become EV leader" strategy required: (1) Hiring AI engineers (Org), (2) Building autopilot systems (IS)
Detailed View: The Information Systems Strategy Triangle
IT = Cost Center
Focus: Infrastructure
Budget: Expense to CONTROL
IT delivers services
Focus: ITSM, helpdesk
Budget: Service costs
IT = Business itself
Focus: Growth, innovation
Budget: Investment to MANAGE
Detailed View: Evolution of IT Maturity Stages
Common Question: "An organization has processes that are documented but lacks automated improvement. What level is this?"
Answer: Level 3 (Defined) - Has documentation but no automated continuous improvement (Level 5)
Communication - Competence - Governance - Partnership - Scope - Skills
Strategic Alignment > Value Delivery > Risk Management > Resource (People) > Performance
Detailed View: 5 Focus Areas of IT Governance
Operational - New products - Customer - Improved decisions - Competitive - Survival
"Where are we TODAY?"
SWOT, current capabilities, gap analysis
"Where do we WANT to be?"
Vision, Mission, Goals
"HOW do we get there?"
Roadmap, Projects, Budget
Detailed View: Strategic Alignment Model (SAM)
Key Insight: When implementing IS, you MUST consider impact on ALL 4 components.
Example: New ERP system affects: People (training needed), Structure (new reporting lines), Tasks (automated processes), Info/Control (new dashboards)
Establish planning project
Define project plan, schedule
Set tasks & deliverables
Document IS environment
Objectively analyze
Communicate to executives
Express IS mission/vision
Formulate objectives
Align with business
Document roadmap
Summarize costs/time
Identify options
IT Maturity is a measure of an organization's capability to effectively govern and manage IT resources. It assesses how well IT processes are defined, documented, managed, and optimized. Organizations use maturity models (e.g., COBIT) to determine their current level and identify improvements needed.
Draw the 3-stage curve showing progression:
Draw triangle with 3 corners:
Key Principle: Change in ANY corner requires adjustment in the other two. Misalignment leads to failure!
Example: Tesla - Business strategy (sustainable energy) drives Org (flat hierarchy, innovation culture) and IS (AI autopilot, battery management systems).
3 Generic Strategies:
Answer: YES, IS strategies are critical in dynamic environments!
Use Hypercompetition Model:
IS enables: Real-time analytics, rapid deployment, market sensing, customer feedback loops
| Framework | Focus | Best For | Key Question |
|---|---|---|---|
| COBIT | Governance & Controls | Compliance | WHAT to do? |
| ITIL | Service Management | IT Operations | HOW to do it? |
| ISO 27001 | Security | Data Protection | Is it SECURE? |
| JISC | Higher Education | Universities | 5 Perspectives? |
Remember: This course tests UNDERSTANDING, not just memorization. Use EXAMPLES in your answers. Draw DIAGRAMS when possible. MANAGE YOUR TIME!