Transforming information security governance in India (A SAP-LAP based case study of security, IT policy and e-governance)

Abstract

Purpose Digital India, the flagship programme of Government of India (GoI) originated from National e-Governance Project (NeGP) in the year 2014. The programme has important aspect of information security and implementation of IT policy which supports e-Governance in a focused approach of Mission Mode. In this context, there is a need to assess situation of the programme which covers a study of initiatives and actions taken by various actor involved and processes which are responsible for overall e-Governance. Therefore, the purpose of this case study is to develop a Situation-Actor-Process (SAP), Learning-Action-Performance (LAP) based inquiry model to synthesize situation of information security governance, IT policy and overall e-Governance. Design/methodology/approach In this case study both systematic inquiry and matrices based SAP-LAP models are developed. Actors are classified who are found responsible and engaged in IT policy framing, infrastructure development and also in e-Governance implementation. Based on a synthesis of SAP components, various LAP elements were then synthesized then which further led to learning from the case study. Suitable actions and performance have also been highlighted, followed by a statement of the impact of the efficacy i.e. transformation of information security, policy and e-Governance on the Digital India programme. Findings On developing the SAP-LAP framework, it was found that actors like the Ministry of Electronics and Information Technology of the Govt. of India secures a higher rank in implementing various initiatives and central sector schemes to accelerate the agenda of e-Governance. Actions of other preferred actors include more investments in IT infrastructure, policy development and a mechanism to address cyber security threats for effective implementation of e-Governance. It was found that actors should be pro-active on enhancing technical skills, capacity building and imparting education related to ICT applications and e-Governance. Decision making should be based on the sustainable management practices of e-Governance projects implementation to manage change, policy making and the governmental process of the Indian administration and also to achieve Sustainable Development Goals by the Indian economy. Research limitations/implications The SAP-LAP synthesis is used to develop the case study. However, few other qualitative and quantitative multi criteria decision making approaches could also be explored for the development of IT security based e-Governance framework in the Indian context. Practical implications The synthesis of SAP leads to LAP components which can bridge the gaps between information security, IT policy governance and e-Governance process. Based on the learning from the Situation, it is said that the case study can provide decision making support and has impact on the e-Governance process i.e. may enhance awareness about e-services available to the general public. Such work is required to assess the transparency and accountability on the Government. Social implications Learning based on the SAP-LAP framework could provide decision making support to the administrators, policy makers and IT sector stakeholders. Thus, the case study would further help in addressing the research gaps, accelerating e-Governance initiatives and in capturing cyber threats. Originality/value The SAP-LAP model is found as an intuitive approach to analyze the present status of information security governance, IT policy and e-Governance in India in a single unitary model.

Goods and Services Tax (GST) Implementation in India: A SAP–LAP–Twitter Analytic Perspective

“…8). Although such problems are expected during the transition phase of implementation through IT as observed in the previous research by Anand et al (2018), Suri (2005), Sushil (2012), andSushil (2008), which are commonly related to implementation hurdles due to ineffective change management strategies (Siddiqui, 2018;Singh et al, 2020). Furthermore, the study advances an understanding of how SAP-LAP analysis can analyze the fiscal policy issues applying a blended method approach to establish a multistakeholder perspective on GST implementation through Twitter analytics coupled with SAP-LAP.…”

“…8 ). Although such problems are expected during the transition phase of implementation through IT as observed in the previous research by Anand et al ( 2018 ), Suri ( 2005 ), Suri and Sushil ( 2012 ), and Suri and Sushil ( 2008 ), which are commonly related to implementation hurdles due to ineffective change management strategies (Siddiqui, 2018 ; Singh et al, 2020 ).

Fig.

…”

“…The analysis is performed with an interpretive method known as SAP–LAP (situation, actor, process and learning, action, performance) framework developed by Sushil ( 2000 ). The SAP–LAP method was widely used by the researchers in case-based studies (Anand et al, 2018 ; Charan, 2012 ; Chavan et al, 2019 ; Kanda & Deshmukh, 2007 ; Anand et al, 2018 ; Naik & Srivastava, 2017 ; Pramod & Banwet, 2010 ; Sushil, 2019 ; Suri & Sushil, 2008 ). As described by Sushil ( 2009 ), “SAP–LAP is a generic framework which can be used in various contexts, such as problem-solving, change management, be used as generalized statements for the similar cases in the future by proper synthesis” (p. 11).…”

Kepedulian Keamanan Informasi di Pemerintahan: Praktik Manajemen dan Dampaknya

“…Hasil menunjukkan perlunya dukungan dari manajemen secara konsisten, budaya keamanan informasi bagi organisasi dan sistem pemantauan yang tepat untuk efektivitas manajemen keamanan informasi. Penelitian lain [4] dilakukan pada organisasi pemerintahan di India menggunakan model SAP-LAP untuk menyajikan konteks berkaitan dengan tata kelola keamanan informasi dan implementasi kebijakan Teknologi Informasi (TI) untuk mendukung proyek-proyek e-Governance. Hasil temuan, yaitu peningkatan kapasitas dan memberikan edukasi yang berhubungan dengan aplikasi Information And Communications Technology (ICT) dan e-Governance secara totalitas.…”

“…Di Indonesia belum ditemukan penelitian tentang praktik keamanan informasi yang diterapkan oleh manajemen apakah berdampak bagi anggota organisasi. Dengan demikian, penelitian ini merujuk pada penelitian yang pernah dilakukan tentang praktik manajemen keamanan informasi [3], [4]. Pentingnya dilakukan penelitian ini agar efektivitas terhadap praktik keamanan informasi diketahui dan kepedulian keamanan informasi dapat meningkat seiring dengan berkembangnya TI.…”