A structured approach to the identification of the significant risks related to enterprise mobile solutions at a mobile technology component level

[摘要] ENGLISH ABSTRACT: The consumerisation of mobile technology is driving the mobile revolution andenterprises are forced to incorporate mobile solutions into their business processesin order to remain competitive. While there are many benefits relating to theinvestment in and use of mobile technology, significant risks are also beingintroduced into the business. The fast pace of technological innovation and the rateof adoption of mobile technology by employees has, however, created anenvironment where enterprises are deploying mobile solutions on an ad hoc basis.Enterprises are only addressing the risks as they are occurring and resulting inlosses. The key contributing factor to this lack of governance and management is thefact that those charged with governance do not understand the underlying mobiletechnology components.The purpose of this research is to improve the understanding of the underlyingcomponents of mobile technology. The research further proposes to use thisunderstanding to identify the significant risks related to mobile technology and toformulate appropriate internal controls to address these risks. The findings of theresearch identified the following underlying components of mobile technology: mobiledevices; mobile infrastructure, data delivery mechanisms and enabling technologies;and mobile applications. Based on an understanding of the components andsubcategories of mobile technology, a control framework was used to identify thesignificant risks related to each component and subcategory. The significant risksidentified included both risks to the users (including interoperability, user experience,connectivity and IT support) as well as risks to the enterprise's strategies (includingcontinuity, security, cost and data ownership). The research concludes byformulating internal controls that the enterprise can implement to mitigate thesignificant risks. This resulted in two matrixes that serve as quick-reference guides toenterprises in the identification of significant risks at an enterprise specific mobiletechnology component level, as well as the relevant internal controls to consider.The matrixes also assist enterprises in determining the best mobile solutions todeploy in their business, given their strategies, risk evaluation and controlenvironment.

[发布机构] Stellenbosch University