UQ Business School 7th March 2022 BISM7221 Information Systems Control, Governance and Audit Ethical IT Decision-Making AND IT Governance Assessment Guideline SEMESTER 1 2022 UQ Business School 7th March 2022 BISM7221 Information Systems Control, Governance, and Audit Essay Assessment Guideline (Semester 1 2022) 1 Purpose This document identifies the requirements for this assessment and a marking rubric to provide guidance in undertaking this assessment. Details: Type: Essay Due Date: 2:00pm 28th April 2022 Weight: 20% In Brief: One 1,500-word essay that explores the relationship between ethical IT decision-making in business and Information Technology (IT) governance. Task Description This 1,500-word essay explores the relationship between ethical IT decision-making in business and Information Technology (IT) governance. This is an individual assignment, and while students are expected to discuss the essay with their peers the submitted assessment item is to be the student’s own work in line with the University’s requirements for academic integrity. The essay is to be supported by current research (as outlined in the Assessment Guideline) and corroborated through examples from non-academic sources. Key to success in this assessment item is to undertake a structured exploration of ethical IT decision-making and how this is affected by different IT governance mechanisms. Specifically, the essay will identify three IT governance (structural, process or relational mechanisms) that are most suited for ensuring ethical IT decision making. The student’s depth of understanding is demonstrated and supported using independent personal research. Pithy and clear writing through adherence to the conventions of essay writing is also important. Further information regarding this assessment is provided in the Assessment Guideline. Criteria & Marking Assessment is made according to the essay’s Introduction, motivation, and signposting (10%), Definition, description and discussion of Ethical IT Decision-Making and IT Governance (30%), Analysis of implications of IT governance for ethical IT decision-making (30%), Summary of insights, and conclusion (20%), and Quality of referencing, professional writing, and presentation (10%). UQ Business School 7th March 2022 BISM7221 Information Systems Control, Governance, and Audit Essay Assessment Guideline (Semester 1 2022) 2 Requirements Scope This assessment item requires you to consider the nature of the relationship between ethical IT decision- making and Information Technology (IT) governance. You should provide an introduction for your essay that outlines your purpose and motivation for the essay and identifies the structure that is to come (that is, the essay should use signposting). As this essay is only 1,500 words long, an important consideration is whether to narrow down the scope of the activities your essay will address. For example, should you consider all ethical IT decision-making (e.g., should narrow your focus on a particular type of IT decision) Should you consider all aspects of IT governance Early in your essay you should therefore identify the context of your essay and scope down the topic of the essay. For example, you might wish to explore the implications of only one aspect of IT governance for a particular type of ethical IT decision. This decision would increase the focus of your essay and make analysis more clear and easier to perform. You should however provide a rationale for your choice in the topic. A rationale might be that you consider one category of IT decisions as having the most impact on organisations or people, or you might consider one IT governance as the most important. In the context of the scope of the essay, you are required to define, describe, and illustrate ethical IT decision-making and define, describe, and illustrate IT governance. In lectures, the class will discuss different aspects of ethical IT decision-making (i.e., computer ethical issues) and rationalist and non- rationalist approaches to understanding ethical decision-making. We will also consider aspects of IT governance, its nature, and the Foundation for Execution (including, but not limited to, Operating Model, Enterprise Architecture, and the Engagement Model). You should support your definitions for IT decision-making and IT governance with independent research from peer reviewed, quality, academic literature. You should also illustrate this discussion of ethical IT decision-making and IT governance with examples from industry sources. You should then explore the relationship between ethical IT decision-making and IT governance in your chosen context. In this analysis you might answer questions such as: What does it mean for ethical IT decision-making if this type of IT governance is mature and executed well Is there an impact on ethical IT decision-making if this type of IT governance is very weak or absent altogether You must consider how IT governance arrangements affect ethical IT decision-making, and, potentially vice versa: does ethical IT decision-making have an impact upon IT governance arrangements This discussion and analysis should be supported by independent peer reviewed research. The discussion is to be aimed at consultants advising business on their IT governance arrangements and providing at least two recommendations that consider ethical considerations or issues to be considered. Finally, conclude your essay by summarising the most insightful points of your essay. In doing so, you should highlight at least two implications of your discussion above for consultants providing recommendations for IT governance in different organisations. That is, answer the question of “what, if anything, do different approaches to IT governance mean for ethical IT decision-making”. You should feel free to speak to the lecturer during consultation times to confirm your approach. UQ Business School 7th March 2022 BISM7221 Information Systems Control, Governance, and Audit Essay Assessment Guideline (Semester 1 2022) 3 Format Your essay should be typed (in Times Roman 12-point font or larger, single-spaced) and it should be approximately 1,500 words in length (excluding abstract, appendices, figure/diagrams/tables, and references). The essay must have a cover/title page, abstract, an introduction, a body, and a conclusion. On the title page note the essay title, your student number, name, the course code and course title, the date, the word count (excluding abstract, appendices, figures/diagrams/tables, and references), and the referencing style used. Appendices may not be needed, but if required a maximum of 3 appendices is allowed. Each appendix should be no more than 3 pages each. Tables should not exceed one page. References can be cited using APA 6th, Harvard, or Vancouver styles (to be noted on the cover page). Other citation styles may be allowed through permission granted by the lecturer. Figures/diagrams/tables should not exceed one page. References can be cited using APA 6th, Harvard, or Vancouver styles (you must note the referencing style on the title page). Other citation styles may be allowed through permission granted by the lecturer. Note especially that the word limit does not include the abstract, appendices, figures, diagrams, tables, or references in the reference list. Frequently Asked Questions: Are independently researched quality academic sources required, and what are they Academic sources are required as noted in the rubric. At least 8 (8) independently researched quality academic sources are needed in defining, describing, discussing, and analysing the topic of the essay. They should be of high quality and relevant (generally, <= 10 years old). Academic, peer-reviewed sources provided as required reading material in the course do not demonstrate independent research. Lecture notes are secondary sources and do not show independent research and should not be cited. A reference list should be included in an appendix at the end of the presentation. This reference list should be prepared in according with the nominated referencing style. For simplicity and clarity, a quality academic source is a paper from any journal listed on the Australian Business Deans Council Journal Quality List that has a ranking of B, A, or A* (see here: https://abdc.edu.au/research/abdc-journal-quality-list/. As the ABDC list does not cover non- business journals, any journal with an ‘impact factor’ > 1.5 would also qualify – see here: http://www.researchsor.com. Additionally, books or book chapters authored by university researchers are considered as ‘academic peer reviewed sources’ for the purpose of this report. Industry (non-academic) sources may be cited and used in argumentation, of course, but they are not considered independently researched quality academic sources. There are videos provided in Learn.UQ for this course that provides hints and tips for finding references to support your essay. Can we cite non-academic ‘industry’ sources Yes you can, and in fact you should illustrate (provide examples) in your essay of ethical IT decision- making and IT governance with real-world industry publications. At least one example of ethical IT decision-making and one example of IT governance is required. UQ Business School 7th March 2022 BISM7221 Information Systems Control, Governance, and Audit Essay Assessment Guideline (Semester 1 2022) 4 Industry publications (e.g., trade magazines such as CPA Australia’s InTheBlack, ISACA’s ISACA magazine, or Forbes Magazine) are industry sources that should be used in support of the examples provided. For simplicity and clarity, industry literature is a publication you would find on a popular website (such as http://www.news.com.au) or in a newsagency. Blogs from reputable sources (e.g., the Telstra blog) would also count, but personal blog entries or internet videos would not count as industry sources. All sources must be in English. As a special case for this course in IS audit, the ISACA Journal (the magazine of the professional body ISACA) may be considered as an academic source (of B, A, or A* quality) or an industry source. How tight are the word limits Assignments that exceed the 1,500-word length substantially will reflect this lack of clarity and conciseness in the marks allocated for quality of referencing, professional writing, and presentation in the assessment rubric accordingly. Assignments that do not meet the minimum 1,500-word length would likely not address the criteria relating to definition, description, discussion, and analysis. Note especially that the word limit does not include the abstract, appendices, figures, diagrams, tables, or references in the reference list. What goes on the cover page again On the cover/title page note the essay title, your student number, name, the course code and course title, the date, the word count (excluding Cover Page, Abstract, Figures/Diagrams/Tables, Appendices and References) and the reference citation style. Assessment The criterion-based marking rubric below applies the Criteria and Marking noted above. Part marks are rounded up to the nearest half mark. Assignment Submission There will be electronic submission of assignments through TurnItIn in the course website (Learn.UQ) under Assessment. The drop-box will remain open to allow for late submission. Your document must be submitted in either Microsoft Word document format or PDF format. You must name your document with your last name followed by your initial(s) (e.g., Smith_A.doc). All students will receive an electronic copy of their marked assignment through Learn.UQ. When you submit your assignment to the drop box, this act will certify that you have acknowledged and understand the Plagiarism Statute of the University of Queensland. As a safeguard, you may wish to submit your assignment to the lecturer by electronic email at the same time as submitting via Blackboard (m.axelsen@business.uq.edu.au). Please discuss any problems that may lead to late submission with your lecturer at the earliest possible opportunity. Items (for which no extension has been granted) submitted after the due date and time, incur a late submission penalty. The penalty is at the rate of 10% of the total available marks for that piece of assessment, for each calendar day or part thereof that the item is overdue. Additional information Additional information will be given to students in class on how to undertake the assignment. BISM7221 – MARKING RUBRIC: ETHICAL IT DECISION-MAKING AND IT GOVERNANCE BISM7221 Information Systems Control, Governance, and Audit Essay Assessment Guideline (Semester 1 2022) 5 Assessed out of 100 points and scaled back to 20 marks. Part marks are rounded up to the nearest half mark. Fail Below Expectations Meets Expectations Very Good Outstanding Introduction, motivation, and signposting (10 points) You have not identified the purpose, objectives & scope of the report. You have struggled to identify the purpose, objectives & scope of the report. You have identified the purpose, objectives & scope of the report. You have clearly identified the purpose, objectives & scope of the report. You have clearly cohesively identified the purpose, objectives & scope of the report. You have not indicated the structure of the report in the introduction. You have struggled to indicate the structure of the report in the introduction. You have indicated the structure of the report in the introduction using signposting. You have indicated the structure of the report in the introduction using signposting. You have clearly indicated the structure of the report in the introduction using signposting. Definition, description, and discussion of Ethical IT Decision-Making and IT Governance (30 points) You have not defined and described ethical IT decision- making You have defined and/or described ethical IT decision- making but this work is incomplete or inaccurate or not supported by at least three quality independent sources from the literature. . You have defined and described ethical IT decision- making using at least three independent sources from the literature. You have provided a very good and clear definition and description of ethical IT decision-making using at least three quality independent sources from the literature. You have provided an excellent and clear definition and description of ethical IT decision-making using at least three high quality independent sources from the literature. No example of ethical IT decision-making is provided. A poor or irrelevant example of ethical IT decision-making is provided, or the example is not supported by a relevant industry source. An example of ethical IT decision-making is provided, and the example is supported by a relevant industry source. A very good example of ethical IT decision-making is provided, and the example is supported by a relevant industry source. An outstanding example of ethical IT decision-making is provided, and the example is supported by a relevant industry source. No discussion of ethical IT decision-making is provided. An incomplete and cursory discussion of ethical IT decision-making is provided. You have discussed ethical IT decision-making. You have provided a discussion of ethical IT decision-making that relates to its role in business. You have provided a discussion of ethical IT decision-making that clearly contextualises its role in business. BISM7221 – MARKING RUBRIC: ETHICAL IT DECISION-MAKING AND IT GOVERNANCE BISM7221 Information Systems Control, Governance, and Audit Essay Assessment Guideline (Semester 1 2022) 6 You have not defined and described IT governance. You have defined and/or described IT governance but this work is incomplete or inaccurate or not supported by at least three quality independent sources from the literature. You have defined and described IT governance from the literature using at least three independent sources from the literature. You have provided a very good and clear definition and description of IT governance using at least three quality independent sources from the literature. You have provided an excellent and clear definition and description of IT governance using at least three high quality independent sources from the literature. No example of IT governance is provided. A poor or irrelevant example of IT governance is provided, or the example is not supported by a relevant industry source. An example of IT governance is provided, and the example is supported by a relevant industry source. A very good example of IT governance is provided, and the example is supported by a relevant industry source. An outstanding example of IT governance is provided, and the example is supported by a relevant industry source. No discussion of IT governance is provided. An incomplete and cursory discussion of IT governance is provided. You have discussed IT governance. You have provided a discussion of IT governance that relates to its role in business. You have provided a discussion of IT governance that clearly contextualises its role in business. Analysis of Implications of IT governance for ethical IT decision-making (30 points) A relationship between IT governance and ethical IT decision-making is not identified. A relationship between IT governance and ethical IT decision-making is implied but not explicitly considered. A relationship between IT governance and ethical IT decision-making is explicitly considered. A relationship between IT governance and ethical IT decision-making is explicitly considered including how and why different IT governance practices affect ethical IT decision-making. An insightful relationship between IT governance and ethical IT decision-making is explicitly considered including how and why different IT governance practices affect ethical IT decision making. Your work demonstrates little to no commitment to identifying the ethical issues associated with this topic. Your work demonstrates a developing ability to identify the ethical issues associated with this topic. Your work demonstrates a developed ability to identify the ethical issues associated with this topic. Your work demonstrates a well-developed commitment to identifying the ethical issues associated with this topic. Your work demonstrates a highly developed commitment to identifying the ethical issues associated with this topic. You have not considered the ethical issues associated with this topic in sufficient detail. You have provided appropriate discussion of some of the ethical issues associated with this topic. You have provided a careful and considered discussion of the key ethical issues associated with this topic. You have provided a detailed and thoughtful discussion of the ethical issues associated with this topic. You have provided a thorough and attentive reflection on the ethical issues associated with this topic. BISM7221 – MARKING RUBRIC: ETHICAL IT DECISION-MAKING AND IT GOVERNANCE BISM7221 Information Systems Control, Governance, and Audit Essay Assessment Guideline (Semester 1 2022) 7 Your examination of ethical issues is not broad enough in scope. You have not considered more than one stakeholder perspective, and your conclusion is superficial/erroneous. Your work demonstrates an appropriate understanding of the need to consider ethical issues from more than one stakeholder perspective. Your work demonstrates a committed approach to considering the ethical scope of this topic. You have considered multiple stakeholder perspectives before providing a conclusion. Your work demonstrates a highly committed approach to considering the broad ethical scope of this topic. You have examined all stakeholder perspectives before providing a detailed conclusion. Your work demonstrates an outstanding approach to considering the broad ethical scope of this topic. You have carefully examined all stakeholder perspectives before providing a detailed and thoughtful conclusion. You have not provided sufficient recommendations and proposals. Your consideration of ethical issues is superficial/erroneous. Your recommendations and proposals demonstrate an appropriate awareness of the importance of discussing ethical issues. Your recommendations and proposals demonstrate a developed awareness of ethics and a desire to promote awareness of issues. Your recommendations and proposals demonstrate an impressive commitment to ethics, and a desire to further understanding with your ideas. Your recommendations and proposals demonstrate an outstanding commitment to ethics, and a genuine desire to further both understanding and action with your ideas. No independent academic research is accessed in this analysis. Inadequate independent academic research (<2 sources) is accessed in this analysis. Adequate independent academic research (at least 2 quality sources) is cited in support of this analysis. Very good independent academic research (at least 2 quality sources) is considered in support of this analysis. Very good independent academic research (at least 2 sources) is considered in the analysis, with contrasting views considered. Summary of insights and conclusion (20 points) No abstract is provided. An abstract is provided but it is weak and incomplete. An abstract is provided that is succinct and clear. An abstract is provided that is succinct, clear and address the full scope of the essay. An abstract is provided that is succinct, thoughtful, & addresses the full scope of the essay. No conclusion is present, or the essay ends abruptly. The conclusion is very brief and does not address the full scope of the essay. The conclusion is succinct and addresses most of the scope of the essay. The conclusion is succinct and addresses all the scope of the essay. The conclusion is a succinct and thoughtful summary. No summary of the insights for consultants from the essay is provided. An inadequate summary of the insights for consultants from the essay is provided. A relevant summary of the insights for consultants from the essay is provided. A relevant and concise summary of the insights for consultants from the essay provided. A relevant and concise summary of the insights for consultants from the essay is provided, and it reflects the important points made. BISM7221 - MARKING RUBRIC: ETHICAL IT DECISION-MAKING AND IT GOVERNANCE BISM7221 Information Systems Control, Governance, and Audit Essay Assessment Guideline (Semester 1 2022) 8 Quality of referencing, professional writing, and presentation (10 points) The report is not presented to an acceptable professional business standard. The report is not consistently presented to an acceptable professional business standard. The report is consistently presented to an adequate professional business standard. The report is consistently presented to a high professional business standard with clear arguments. The report is consistently presented to a high professional business standard with clear arguments that demonstrate logical flow. There are major spelling and grammatical errors throughout. There are major spelling and grammatical errors present. There are some spelling and grammatical errors present. There are few spelling and grammatical errors present. There are only occasional spelling and grammatical errors present. The report demonstrates a very poor level of organization and cohesion. The report demonstrates little organization and cohesion. The report demonstrates adequate to good organization and cohesion. The report demonstrates a very good level of organization and cohesion. The report demonstrates an excellent level of organization and cohesion. Formatting and referencing requirements are not addressed. Formatting and referencing requirements are below expectations. Formatting and referencing requirements meet expectations. Formatting and referencing requirements are addressed well. Formatting and referencing requirements are addressed exceptionally well. Prepared by: Micheal Axelsen Senior Lecturer (Business Information Systems) Date: 7th March 2022