The strategic information systems planning (SISP) practice in Malaysian Government Agencies

• Main Authors: Selamat, Md. Hafiz, Suhaimi, Mohd. Adam, Hussin, Husnayati
• Format: Book Section
• Published: Institute of Electrical and Electronics Engineers 2008
• Subjects: QA75 Electronic computers. Computer science
• Online Access: http://eprints.utm.my/id/eprint/12876/
• Institution: Universiti Teknologi Malaysia

Strategic information system planning (SISP) is an exercise or ongoing activities that enable organization to develop priorities for information system (IS) development [4]. SISP is an approach combination of methods, process and implementation [5]. As a new business strategies and information technologies are both rapidly moving targets, it is a very challenging task to produce an effective plan that achieves business objectives with efficient information systems support [6]. Organization invest very large amount of time and money in the SISP project. It a typical SISP project, term of key managers, users, selected clients, and IS specialist are formed [6] and planning methodology is chosen. SISP process is referring to both SISP formulation and planning [19]. Strategy formulation will drive their planning then constructing the plan may reveal aspects that cause the strategy to be considered. The information security policy is the most important to ensure the information is acknowledged widely [3]. SISP success is improvement in planning capability and the fulfillment of planning objective [18] through resource efficiency, process enrichment and process effectiveness[91] (Ward & Peppard, 2002. This study aims to explore the SISP implementation in Malaysian Public Sector and their agencies since the first researcher Isa, (1997) introduced this SISP idea in Malaysia, front the planning process and the policy views. Furthermore, these studies also investigate the contribution of information security policy and planning process to the strategic information systems planning success in the organization. On the other hand, Information security planning is to mitigate risk associated with the processing of information with confidentially, integrity and authenticity[21]. Finally, Information systems security and strategic information systems must be integrated with business plan[21].