An analysis of the information security governance in the State Owned Enterprises (SOE) In Zimbabwe.

This study examined the existence and implementation of information security governance (ISG) in the state-owned-enterprises (SOE) in Zimbabwe. The study examined the implementation of information security governance in SOEs in Zimbabwe. This exploratory study was conducted using semi-structured in...

Full description

Saved in:
Bibliographic Details
Main Authors: Sigauke, Joseph, Mupfiga, Paul, Tsokota, Theo
Format: Article
Language:English
Published: The International Journal Of Engineering And Science 2016
Subjects:
Online Access:http://hdl.handle.net/11408/1512
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:This study examined the existence and implementation of information security governance (ISG) in the state-owned-enterprises (SOE) in Zimbabwe. The study examined the implementation of information security governance in SOEs in Zimbabwe. This exploratory study was conducted using semi-structured interviews to collect data from a simple random sample. Interviews were also carried out with a composition of 13 Board members, 18 Executive management and 26 IT Executives. The data was then arranged into tables and for simple interpretation. The results of the study revealed that information security governance in SOE in Zimbabwe is still lagging behind. Despite the majority of Zimbabwe SOE recognizing the importance of ISG, most of them have no clear information security strategies or written information security policy statements. The study recommends that the state-owned-enterprises use IT governance frameworks such as COBIT, ITIL and BS17009.