{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,1]],"date-time":"2026-04-01T19:32:20Z","timestamp":1775071940331,"version":"3.50.1"},"reference-count":68,"publisher":"American Accounting Association","issue":"1","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,6,1]]},"abstract":"<jats:title>ABSTRACT<\/jats:title><jats:p>COBIT, currently in its fifth edition, is a good-practice framework for the enterprise governance of IT. There is limited academic research that either analyzes COBIT or leverages COBIT as an instrument in executing research programs. Through linking core elements and principles of COBIT to insights from IT-related and general management literature, this paper explores the use of COBIT in future research activities. This paper positions COBIT as a framework for enterprise governance of IT. The major directions and core principles of the framework are described. Connections are made of these directions and principles to the relevant literature. Research questions for future research around enterprise governance of IT and COBIT 5 are proposed and discussed.<\/jats:p>","DOI":"10.2308\/isys-50422","type":"journal-article","created":{"date-parts":[[2013,2,6]],"date-time":"2013-02-06T18:21:05Z","timestamp":1360174865000},"page":"307-324","source":"Crossref","is-referenced-by-count":143,"title":["COBIT 5 and Enterprise Governance of Information Technology: Building Blocks and Research Opportunities"],"prefix":"10.2308","volume":"27","author":[{"given":"Steven","family":"De Haes","sequence":"first","affiliation":[{"name":"University of Antwerp"}]},{"given":"Wim","family":"Van Grembergen","sequence":"additional","affiliation":[{"name":"University of Antwerp"}]},{"given":"Roger S.","family":"Debreceny","sequence":"additional","affiliation":[{"name":"University of Hawaii at M\u0101noa"}]}],"member":"1112","published-online":{"date-parts":[[2013,2,1]]},"reference":[{"key":"2023021421133215800_","unstructured":"Ahern, D. M., A. Clouse, and R. Turner. 2008. CMMI Distilled: A Practical Introduction to Integrated Process Improvement. 3rd edition. Boston, MA: Addison-Wesley."},{"issue":"2","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1016\/S0963-8687(96)80039-4","article-title":"Organizational learning and core capabilities development: The role of IT","volume":"5","author":"Andreu","year":"1996","journal-title":"Journal of Strategic Information Systems"},{"key":"2023021421133215800_","unstructured":"Anthony, R. N. 1965. Planning and Control Systems: A Framework for Analysis. Boston, MA: Division of Research, Graduate School of Business Administration, Harvard University."},{"key":"2023021421133215800_","unstructured":"Beer, S. 1959. Cybernetics and Management. London, U.K.: English Universities Press."},{"key":"2023021421133215800_","unstructured":"Beer, S. 1972. Brain of the Firm. London, U.K.: The Penguin Press."},{"key":"2023021421133215800_","unstructured":"Berle, A. A., and G. C. Means. 1932. The Modern Corporation and Private Property. New York, NY: The Macmillan Company."},{"issue":"4","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"260","DOI":"10.1016\/j.accinf.2005.07.001","article-title":"IS practitioners' views on core concepts of information integrity","volume":"6","author":"Boritz","year":"2005","journal-title":"International Journal of Accounting Information Systems"},{"issue":"1","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1287\/isre.8.1.69","article-title":"Examining the emergence of hybrid IS governance solutions: Evidence from a single case site","volume":"8","author":"Brown","year":"1997","journal-title":"Information Systems Research"},{"issue":"12","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1145\/163298.163309","article-title":"The productivity paradox of information technology","volume":"36","author":"Brynjolfsson","year":"1993","journal-title":"Communications of the ACM"},{"key":"2023021421133215800_","unstructured":"Cabinet Office. 2011. ITIL Lifecycle Suite. London, U.K.: The Stationery Office."},{"issue":"2","key":"2023021421133215800_","first-page":"125","article-title":"Business strategic orientation, information systems strategic orientation, and strategic alignment","volume":"8","author":"Chan","year":"1997","journal-title":"Information Systems Research: ISR: A Journal of the Institute of Management Sciences"},{"key":"2023021421133215800_","unstructured":"Committee of Sponsoring Organizations of the Treadway Commission (COSO). 1992. Internal Control\u2014Integrated Framework. New York, NY: Committee of Sponsoring Organizations of the Treadway Commission."},{"issue":"8","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"353","DOI":"10.1016\/j.im.2011.08.003","article-title":"Organizational information systems competences in small and medium-sized enterprises","volume":"48","author":"Cragg","year":"2011","journal-title":"Information and Management"},{"key":"2023021421133215800_","unstructured":"Cyert, R. M., and J. G. March. 1963. A Behavioral Theory of the Firm. Englewood Cliffs, NJ: Prentice Hall, Inc."},{"issue":"1","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1016\/j.accinf.2009.12.005","article-title":"Towards an integrated view of IT value measurement","volume":"11","author":"Davern","year":"2010","journal-title":"International Journal of Accounting Information Systems"},{"key":"2023021421133215800_","doi-asserted-by":"crossref","unstructured":"De Haes, S., and W. Van Grembergen. 2008 a. Analyzing the Relationship between IT Governance and Business\/IT Alignment Maturity. Proceedings of the 41st Hawaii International Conference on System Sciences, Kailua-Kona, HI, Shidler College of Business, University of Hawai'i at Manoa.","DOI":"10.1109\/HICSS.2008.66"},{"key":"2023021421133215800_","first-page":"443","article-title":"An exploratory study into the design of an IT governance minimum baseline through Delphi research","volume":"22","author":"De Haes","year":"2008","journal-title":"Communications of AIS"},{"issue":"2","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1080\/10580530902794786","article-title":"An exploratory study into IT governance implementations and its impact on business\/IT alignment","volume":"26","author":"De Haes","year":"2009","journal-title":"Information Systems Management"},{"issue":"1","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"14","DOI":"10.4018\/jitbag.2010120402","article-title":"Analyzing the impact of enterprise governance of IT practices on business performance","volume":"1","author":"De Haes","year":"2010","journal-title":"International Journal on IT\/Business Alignment and Governance"},{"key":"2023021421133215800_","unstructured":"De Wit, B., and R. Meyer. 2005. Strategy Synthesis: Revolving Strategy Paradoxes to Create Competitive Advantage. London, U.K.: Cengage Learning EMEA."},{"issue":"1","key":"2023021421133215800_","doi-asserted-by":"crossref","DOI":"10.2308\/isys-50418","article-title":"IT governance and process maturity: A multinational field study","volume":"27","author":"Debreceny","year":"2013","journal-title":"Journal of Information Systems"},{"issue":"3","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"135","DOI":"10.1016\/j.accinf.2008.03.001","article-title":"Measuring the effects of business intelligence systems: The relationship between business process and organizational performance","volume":"9","author":"Elbashir","year":"2008","journal-title":"International Journal of Accounting Information Systems"},{"issue":"3","key":"2023021421133215800_","first-page":"9","article-title":"Core IS capabilities for exploiting information technology","volume":"39","author":"Feeny","year":"1998","journal-title":"Sloan Management Review"},{"issue":"1","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"4","DOI":"10.1147\/sj.382.0472","article-title":"Strategic alignment: Leveraging information technology for transforming organizations","volume":"32","author":"Henderson","year":"1993","journal-title":"IBM Systems Journal"},{"key":"2023021421133215800_","first-page":"2","article-title":"Using the balanced scorecard to achieve sustained IT-business alignment: A case study","volume":"17","author":"Hu","year":"2006","journal-title":"Communications of AIS"},{"issue":"3","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"343","DOI":"10.1016\/j.mar.2007.02.001","article-title":"Strategy, performance measurement techniques, and information technology of the firm and their links to organizational performance","volume":"18","author":"Hyv\u00f6nen","year":"2007","journal-title":"Management Accounting Research"},{"key":"2023021421133215800_","unstructured":"ISACA. 2007. COBIT\u00ae 4.1. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2009a. Building the Business Case for COBIT\u00ae and Val IT\u2122: Executive Briefing. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2009b. Implementing and Continually Improving IT Governance. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2009c. The Risk IT Framework: Risk IT Based on COBIT. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2010. Enterprise Value: Governance of IT Investments. The Val IT Framework 2.0. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2011a. COBIT Mapping: Overview of International IT Guidance. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2011b. COBIT\u00ae Process Assessment Model (PAM): Using COBIT\u00ae 4.1. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2011c. Global Status Report on the Governance of Enterprise IT (GEIT)\u20142011. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2012a. COBIT 5 Implementation. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"ISACA. 2012b. COBIT 5: A Business Framework for the Governance and Management of Enterprise IT. Rolling Meadows, IL: ISACA."},{"key":"2023021421133215800_","unstructured":"Information Systems Audit and Control Foundation (IASCF). 1994. Control Objectives for Information and Related Technology: COBIT. Rolling Meadows, IL: Information Systems Audit and Control Foundation."},{"key":"2023021421133215800_","unstructured":"International Organization for Standardization\/International Electrotechnical Commission (ISO\/IEC). 2008. ISO\/IEC 38500 Corporate Governance of Information Technology. Geneva, Switzerland: International Organization for Standardization\/International Electrotechnical Commission."},{"key":"2023021421133215800_","unstructured":"IT Governance Institute (ITGI). 2000. COBIT. Rolling Meadows, IL: IT Governance Institute."},{"key":"2023021421133215800_","unstructured":"IT Governance Institute (ITGI). 2001. Board Briefing on IT Governance. Rolling Meadows, IL: IT Governance Institute."},{"key":"2023021421133215800_","unstructured":"IT Governance Institute (ITGI). 2005. COBIT\u00ae 4. Rolling Meadows, IL: IT Governance Institute."},{"key":"2023021421133215800_","unstructured":"IT Governance Institute (ITGI). 2006. IT Control Objectives for Sarbanes-Oxley: The Role of IT in the Design and Implementation of Internal Control over Financial Reporting. 2nd Ed. Rolling Meadows, IL: IT Governance Institute."},{"issue":"3","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"547","DOI":"10.1111\/j.1540-5915.1993.tb01293.x","article-title":"Organizing for global competition: The fit of information technology","volume":"24","author":"Ives","year":"1993","journal-title":"Decision Sciences"},{"issue":"2","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"189","DOI":"10.2308\/isys-50255","article-title":"The updated COSO Internal Control\u2014Integrated Framework: Recommendations and opportunities for future research","volume":"26","author":"Janvrin","year":"2012","journal-title":"Journal of Information Systems"},{"key":"2023021421133215800_","unstructured":"Kaplan, R. S., and D. P. Norton. 1996. The Balanced Scorecard: Translating Strategy into Action. Boston, MA: Harvard Business School Press."},{"issue":"4","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"25","DOI":"10.4018\/irmj.2007100103","article-title":"IT infrastructure capabilities and business process improvements: Association with IT governance characteristics","volume":"20","author":"Law","year":"2007","journal-title":"Information Resources Management Journal"},{"key":"2023021421133215800_","unstructured":"Luftman, J. N. 1996. Competing in the Information Age: Strategic Alignment in Practice. Oxford, U.K.: Oxford University Press."},{"key":"2023021421133215800_","unstructured":"March, J., and H. Simon. 1958. Organizations. New York, NY: John Wiley."},{"issue":"8","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"1014","DOI":"10.1016\/j.im.2006.10.001","article-title":"Management of information systems: Insights from accounting research","volume":"43","author":"O'Connor","year":"2006","journal-title":"Information and Management"},{"key":"2023021421133215800_","unstructured":"Open Group. 2009. The Open Group Architecture Framework (TOGAF), Version 9. Zaltbommel, The Netherlands: Van Haren Publishing."},{"issue":"4","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"7","DOI":"10.1201\/1078\/44705.21.4.20040901\/84183.2","article-title":"Crafting information technology governance","volume":"21","author":"Peterson","year":"2004","journal-title":"Information Systems Management"},{"key":"2023021421133215800_","first-page":"137","article-title":"How competitive forces shape strategy","author":"Porter","year":"1979","journal-title":"Harvard Business Review"},{"key":"2023021421133215800_","unstructured":"Porter, M. E. 1985. Competitive Advantage: Creating and Sustaining Superior Performance. New York, NY: Free Press."},{"issue":"2","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"261","DOI":"10.2307\/249754","article-title":"Arrangements for information technology governance: A theory of multiple contingencies","volume":"23","author":"Sambamurthy","year":"1999","journal-title":"MIS Quarterly"},{"issue":"1\/2","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1016\/0361-3682(90)90018-P","article-title":"The role of management control systems in creating competitive advantage: New perspectives","volume":"15","author":"Simons","year":"1990","journal-title":"Accounting, Organizations and Society"},{"key":"2023021421133215800_","unstructured":"Simons, R. 2000. Performance Measurement and Control Systems for Implementing Strategy. Upper Saddle River, NJ: Prentice Hall."},{"issue":"4","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"353","DOI":"10.1016\/j.jsis.2007.09.001","article-title":"Understanding the influence of information systems competencies on process innovation: A resource-based view","volume":"16","author":"Tarafdar","year":"2007","journal-title":"The Journal of Strategic Information Systems"},{"key":"2023021421133215800_","unstructured":"Thorp, J. 2003. The Information Paradox. New York, NY: McGraw-Hill Ryerson."},{"issue":"4","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"240","DOI":"10.1016\/j.accinf.2007.09.001","article-title":"An empirical examination of CobiT as an internal control framework for information technology","volume":"8","author":"Tuttle","year":"2007","journal-title":"International Journal of Accounting Information Systems"},{"key":"2023021421133215800_","doi-asserted-by":"crossref","unstructured":"Van Grembergen, W., and S. De Haes. 2009. Enterprise Governance of Information Technology: Achieving Strategic Alignment and Value. New York, NY: Springer.","DOI":"10.1007\/978-0-387-84882-2_2"},{"issue":"1","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"23","DOI":"10.1080\/15228053.2003.10856015","article-title":"Linking the IT balanced scorecard to the business objectives at a major Canadian financial group","volume":"5","author":"Van Grembergen","year":"2003","journal-title":"Journal for Information Technology Cases and Applications"},{"key":"2023021421133215800_","unstructured":"Van Grembergen, W., S. De Haes, and H. Van Brempt. 2008. Understanding How Business Goals Drive IT Goals. Rolling Meadows, IL: ISACA."},{"issue":"2","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1016\/0263-2373(93)90037-I","article-title":"Continuous strategic alignment: Exploiting information technology capabilities for competitive success","volume":"11","author":"Venkatraman","year":"1993","journal-title":"European Management Journal"},{"issue":"3","key":"2023021421133215800_","first-page":"141","article-title":"Strategic investment in information technology: An empirical study","volume":"12","author":"Weill","year":"1990","journal-title":"Information Age"},{"issue":"4","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"307","DOI":"10.1287\/isre.3.4.307","article-title":"The relationship between investment in information technology and firm performance: A study of the value-manufacturing sector","volume":"3","author":"Weill","year":"1992","journal-title":"Information Systems Research"},{"key":"2023021421133215800_","unstructured":"Weill, P., and J. W. Ross. 2009. IT Savvy: What Top Executives Must Know to Go From Pain to Gain. Boston, MA: Harvard Business School Press."},{"issue":"2","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"107","DOI":"10.2308\/jis.2010.24.2.107","article-title":"A review of IT governance: A taxonomy to inform accounting information systems","volume":"24","author":"Wilkin","year":"2010","journal-title":"Journal of Information Systems"},{"issue":"6","key":"2023021421133215800_","doi-asserted-by":"crossref","first-page":"541","DOI":"10.1016\/j.ijinfomgt.2012.03.004","article-title":"Dependency-based IT governance practices in inter-organizational collaborations: A graph-driven elaboration","volume":"32","author":"Zarvi\u0107","year":"2012","journal-title":"International Journal of Information Management"}],"container-title":["Journal of Information Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/publications.aaahq.org\/jis\/article-pdf\/27\/1\/307\/11285\/isys-50422.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/publications.aaahq.org\/jis\/article-pdf\/27\/1\/307\/11285\/isys-50422.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,29]],"date-time":"2023-06-29T08:42:40Z","timestamp":1688028160000},"score":1,"resource":{"primary":{"URL":"https:\/\/publications.aaahq.org\/jis\/article\/27\/1\/307\/1532\/COBIT-5-and-Enterprise-Governance-of-Information"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,2,1]]},"references-count":68,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2013,2,1]]},"published-print":{"date-parts":[[2013,6,1]]}},"URL":"https:\/\/doi.org\/10.2308\/isys-50422","relation":{},"ISSN":["0888-7985","1558-7959"],"issn-type":[{"value":"0888-7985","type":"print"},{"value":"1558-7959","type":"electronic"}],"subject":[],"published":{"date-parts":[[2013,2,1]]}}}