Assessing the Level of Information Security Governance (Isg) In Mobile Money Issuers in Ghana

Assessing the Level of Information Security Governance (Isg) In Mobile Money Issuers in Ghana

Kwame Boa-Amponsem

The purpose of this study is to assess the maturity level of implementation of Information Security Governance (ISG) in mobile money firms in Ghana. Mobile Money Issuers in Ghana play an increasingly active role in our financial sector. This is to analyse whether mobile money firms have implemented acceptable levels of information security governance with regards to all aspects of their operations. A survey was conducted using a self-administered questionnaire to assess the degree of implementation of information security governance. The questionnaire was adopted from Information Technology Governance Institute‟s ISG guidelines for executive management and board of directors. All four mobile money firms in Accra-Ghana took part in the survey via email. Responses from the mobile money firms were collated. The results of the study showed that all mobile money issuers in Ghana have implemented most information security governance measures to an acceptable level and thus had a „good‟ rating in the maturity level of ISG implementation. Nevertheless, not all information security governance practices were well implemented by mobile money issuers. Relevant information security policies were not included in the contracts of third parties. Again, third parties and employees of these mobile money firms were not adequately informed and educated of their role in the firm‟s information security program. Finally, major business decisions made by the management of the mobile money firms did not consider information security issues.
This study provides lawmakers in Ghana with the necessary information to pass and enforce regulations that will further protect the personal data of consumers. The study also affords management in the various mobile money firms insight into their information security governance with the goal of improving their security governance.

MSc: Management Information Systems

Ghana Technology University College

September 2016

Dr. Stephen Asunka