![](bg8.png)
ITG Institute. (2003). Board Briefing on IT Governance.
Rolling Meadows, IL 60008 USA: ITGI.
Kitchenham, B. Procedures for Performing Systematic
Reviews, 2004.
Kitchenham, B.; Mendes, E.; Travasso, G. Protocol for
Systematic Review of Within - and Cross – Company
Estimation Models 1. 2007.
Krey, M. Significance and Current Status of Integrated IT
GRC in Health Care: An Explorative Study in Swiss
Hospitals. System Sciences (HICSS), 2015 48th
Hawaii International Conference on, Kauai, HI, 2015,
pp. 3002-3012. 2015a.
Krey, M. Next word prediction for phonetic typing by
grouping language models. 2016 2nd International
Conference on Information Management (ICIM),
London, 2016, pp. 121-126. 2016b.
Krey. M. Et Al. IT governance and its spread in Swiss
hospitals. Part of the IADIS Multi Conference on
Computer Sci. MCCSIS 2010. pp. 52-60. 2010a.
Krey M. Et Al. Approach to the Evaluation of a Method
for the Adoption of Information Technology
Governance, Risk Management and Compliance in the
Swiss Hospital Environment. System Science
(HICSS), 2012 45th Hawaii International Conference
on, Maui, HI, 2012, pp. 2810-2819. 2012b.
Kul, A. Regulatory compliance to ensure information
security: Financial supervision perspective. ECIW
2011; pp. 298-306.2011.
Mafra, S.N. Protocolo de Revisão Sistemática. Grupo de
Engenharia de Software Experimental, Programa de
Engenharia de Sistemas e Computação
(COPPER/UFRJ), 2005a.
Mafra, S.N.; Travassos, G.H. Técnicas de Leitura de
Software: Uma Revisão Sistemática. 2007b.
Maidin, S.S.; Arshad, N.H. Information Technology
Governance Practices in Malaysian Public Sector. In
2010 International Conference on Financial Theory
and Engineering (pp. 281-285). Dubai, UAE, 2010.
Papazafeiropoulou, A.; Spanaki, K. Understanding
governance, risk and compliance information systems
(GRC IS): The experts view. Information Systems
Frontiers, 1–13, 2015.
Patrick, C. “Embrace This Acronym: IT GRC. It Could
Save Banks a Bundle. U.S. Banker. Nov2007, Vol.
117 Issue 11, p62. 2007.
Puspasari, D. Et Al. Designing a tool for IT Governance
Risk Compliance: A case study. Advanced Computer
Science and Information System (ICACSIS), 2011
International Conference on, Jakarta, 2011, pp. 311-
316.
Racz, N.; Weippl E.R.; Seufert A. A process model for
integrated IT governance, risk, and compliance
management. In Proceedings of the 9ª Conference on
Databases and Information Systems, 2010.
Racz, N.; Weippl, E.R.; Bonazzi, R. IT Governance Risk
& Compliance (GRC) Status Quo and Integration: An
Explorative Industry Case Study. SERVICES 2011,
pp. 429-436, July 4-9, 2011.
Rubino, M.; Vitolla, F. Internal control over financial
reporting: opportunities using the COBIT framework.
Managerial Auditing Journal. Vol. 29 Iss: 8; pp.736 -
771. 2014.
Saha P. Et Al. Ontology Based Modeling for Information
Security Management. Dependable, Autonomic and
Secure Computing (DASC), 2011 IEEE Ninth
International Conference on, Sydney, NSW, 2011, pp.
73-80.
Spies, M. "A Software Assurance Evidence Approach to
Cloud Security," 2011 22nd International Workshop
on Database and Expert Systems Applications,
Toulouse, 2011, pp. 39-43.
Solingen, R.V. Et Al. Goal question metric (gqm)
approach Encycl. Softw. Eng., 2002.
Tan, K.S.; Eze, U.C.; Teo W.L. Information technology
governance in the Malaysian electronics
manufacturing industry. 1-2; pp. 587-593. 2008.
Tang, Z; Meng, J.; Wu, Y. The core components and
conceptual framework of IT governance based on
quantitative content analysis. pp. 196-204.2012.
Vicente, P.; Silva M.M. "A Business Viewpoint for
Integrated IT Governance, Risk and Compliance,"
2011 IEEE World Congress on Services, Washington,
DC, 2011, pp. 422-428.
Vukovic, D.; Fertalj. F. Information system quality
assurance in finances building the quality assurance
into information system architecture. ICSOFT 2008 -
Proceedings of the 3rd Intern; ISDM (ABF/-); pp. 355-
360. 2008.
Wiesche, M.; Schermann, M.; Krcmar, H. When IT Risk
Management Produces More Harm than Good: The
Phenomenon of 'Mock Bureaucracy'. System Sciences
(HICSS), 2013 46th Hawaii International Conference
on, Wailea, HI, USA, 2013, pp. 4502-4511.
ICEIS 2017 - 19th International Conference on Enterprise Information Systems
424