An analysis of the information security governance in the State Owned Enterprises (SOE) In Zimbabwe.

Abstract

This study examined the existence and implementation of information security governance (ISG) in the state-owned-enterprises (SOE) in Zimbabwe. The study examined the implementation of information security governance in SOEs in Zimbabwe. This exploratory study was conducted using semi-structured interviews to collect data from a simple random sample. Interviews were also carried out with a composition of 13 Board members, 18 Executive management and 26 IT Executives. The data was then arranged into tables and for simple interpretation. The results of the study revealed that information security governance in SOE in Zimbabwe is still lagging behind. Despite the majority of Zimbabwe SOE recognizing the importance of ISG, most of them have no clear information security strategies or written information security policy statements. The study recommends that the state-owned-enterprises use IT governance frameworks such as COBIT, ITIL and BS17009.