Access to quality data is crucial for business processes, and an effective Data Governance (DG) programme aims to ensure that this happens. However, an examination of industry literature suggests that the implementation of DG programmes continues to present challenges for practitioners. This is despite academic research having developed a large body of DG knowledge and potentially useful artefacts. This case study explores this disjoint by focusing on people's behaviours and how they impact the DG programme. It surfaces root causes for the ineffectiveness of a DG programme. It emerges that a lack of constant review and revision of DG principles results in the organisation being caught in what we refer to as the DG Na & iuml;vet & eacute; Trap.

Security, Education, Training and Awareness (SETA) programmes are implemented within organisations to provide users with the necessary knowledge to recognise cybersecurity threats and to respond to them in an effective and responsible manner. A key challenge with SETA programmes is measuring its overall effectiveness and which awareness and training initiatives should be prioritised. The study explores how those responsible for delivering SETA programmes can optimise its delivery to positively influence user behaviour towards phishing emails. This case study within an Irish Public Sector Body (PSB) uses a mixed-method methodology of both quantitative and qualitative elements, structured around three hypotheses which examine the impact on human behaviour when exposed to different SETA initiatives. The research examines over 12,000 user actions during phishing simulation tests during a 3-year period. Overall, the research presents a 'recommended approach' for designing and implementing a SETA programme to address human behavioural vulnerabilities related to phishing emails.

Business Analytics (BA) is a critical capability for organisations striving to become data-driven, yet many struggle to develop this capability effectively. This research identifies twelve critical success factors (CSFs) for delivering impactful BA within a traditional organisational context. Using a theory-building, interpretive research approach, the paper draws on first-person, phenomenological accounts from the lead author - a practitioner leading BA capability development at HEINEKEN Ireland. The findings emphasise the need for a holistic approach, addressing business value, people, processes, data, technology and organisational culture. By offering practical, context-rich insights, this research provides actionable insights for practitioners while going some way towards meeting the need, within the IS community, for more impactful and practitioner-focused research that highlights context-rich lessons from actual implementation practices.

This paper provides a review of DevOps literature published between 2022 and 2026 a significant time period that coincides with the rapid diffusion of generative AI (GenAI) tools in software development practices. We examine over 1060 peer-reviewed papers to categorize the literature through the PPTD (People, Process, Technology, and Data) socio-technical lens. Our work provides a synthesis of dominant trends and themes in the DevOps conversation and how this has changed over time following the emergence of GenAI. A significant increase in research on 'Data' focused topics and GenAI in particular is observed, as well as the continuing paucity of research on 'People' focused topics. Following our analysis, we propose a future research direction: applying an Activity Theory lens to deliver greater insights into the impact of GenAI on the DevOps workflow.

Purpose The pace of Digital Transformation (DT) is accelerating within organizations, and this has blossomed into a commentary around what we refer to as “doing” DT. Despite this trend, it is hard to find a collection of Critical Success Factors (CSFs) for DT, from either the academic literature or trade press. For the purposes of this research, we define DT as the strategic use of emergent and emerging technologies to make an organization more customer-focused, innovative and efficient, through optimizing processes, data and people, disrupting business and operational models to deliver value to all stakeholders. Therefore, the objective of this theory-building research is to explore the CSFs for DT in a pre-digital organization. Design/methodology/approach For the purposes of this theory-building research we take inspiration from features of the Gioia Methodology. Therefore, we pose the following research question: What are the CSFs for DT that impact positively on the outcome of a DT initiative within a pre-digital organization? To answer this question, we code (following an inductive open, axial and selective coding approach) the stories of 16 key informants (DT leaders). We also survey a further 30 DT leaders to evaluate the importance of our findings (the degree to which each of our nine CSFs for DT are deemed “essential”). Findings We present nine CFSs for DT in a pre-digital organization as a conceptual model. We also evaluate these CSFs for DT, and this evaluation reveals that seven of our CSFs for DT are deemed essential. Furthermore, our evaluation also reveals three interesting patterns, one of which highlights the importance of three specific CSFs that impact on “Culture Change” when “doing” DT in a pre-digital organization. Originality/value This paper is unique in its approach and the CSFs presented can sharpen the DT focus of academia and practice. Our contribution advances the first comprehensive conceptualization of the “essential” CSFs for DT in a pre-digital organization, thereby strengthening the relevance for practitioners striving for the best possible DT initiative outcome.

GenAI tools, such as ChatGPT, represent a profound pedagogical disruption to how analytical and modelling skills are taught in Information Systems. GenAI debates rarely foreground the practices and perspectives of high-performing students who often pioneer new forms of academic engagement. This research paper reports on findings from a 4-month applied research project (July-October 2025) in which a second-year undergraduate student (first author) and an academic mentor (second author) conducted a structured series of Analysis & Design modelling experiments, producing four diagram types across three business scenarios. These diagram types were produced using an AI-assisted approach (the Prompt-Only approach, the Draft approach, the Final Diagram Feedback approach). Our findings show that the Draft approach emerges as the optimal workflow for an Analysis & Design student, with ambitions of becoming an effective Business Analyst. This iterative human-AI interpretive cycle evolves into a methodological pattern we define as Visual Hermeneutic Prompting (VHP).

This paper develops a comparative framework to examine how artificial intelligence (AI) impacts data governance (DG) practices across organisational contexts. As organisations increasingly rely on AI in distributed data environments, understanding how DG practices adapt to such varying conditions becomes critical. Building on foundational DG theory, the study analyses how core DG domains, including data principles, quality, access, metadata, and lifecycle are applied under different organisational scopes and AI types. The proposed framework distinguishes between intra- and inter-organisational settings and between deterministic (rule-based) and probabilistic (learning-based) AI, generating four governance quadrants. It identifies distinct governance tensions across these quadrants, particularly around control, accountability, and coordination. This research shows that even if DG domains remain conceptually stable, their application varies in practice depending on authority distribution and algorithmic characteristics. The study provides a structured lens for understanding AI's role in shaping DG practices and provides a foundation for future empirical research.

This paper examines case study research exploring the operationalization of organizational Data Governance (DG) programmes. In total, 20 case studies are coded using an inductive open coding approach. Following an analysis of practitioner experiences in these case studies a series of DG practice insights emerge. They reveal that DG theory does not resonate with practitioners, and the management of people and their data behaviors have the most influence on DG programme outcomes. Our findings provide a better understanding of DG programmes 'on the ground'. We also develop a DG readiness primer to guide practitioners on their future DG programme journeys.

This paper tracks the evolution (across three iterations) of a hermeneutics-inspired learner self-reflection tool for DSR courses. Specifically, this Learning Analytics (LA) model is designed, instantiated, and evaluated for research methods courses, one on Action Design Research (ADR), delivered in an Irish University in 2023, and one on echeloned DSR ( eDSR), delivered in a Finnish University in 2024. Iteration One sees the emergence of a hermeneutics-inspired design principle for a "Learning-by-Doing" pedagogical approach; Iteration Two sees the emergence of our first attempt at the datafication of learner "interim struggles" as part of the learning process (using v1 of a learner self-reflection tool); Iteration Three sees the emergence of v2 of the learner self-reflection tool and its instantiation in a culturally and topically diverse learning environment (to Iteration Two). Our iterative approach refines the LA model to better align learner self-reflections with the evolving complexities of teaching DSR (ADR and eDSR).

Data quality issues are problematic and costly for organizations. Employees (termed "Data Brokers") must identify data quality issues before data are used for reporting purposes. In five field studies, we investigate how these employees identify these often-hidden data quality issues. Organizations can execute five "checking" approaches: data templates, supervisor validation, data accuracy, data consistency, and data completeness. We discuss each approach, theorize their inter-relationships, and explain their contributions to research and practice.

Digital Transformation (DT) is more than simply integrating a new digital technology into the organization. Despite a growing volume of research, however, there is little coverage of the characteristics of Digital Transformation leadership. Using a grounded approach, where 16 practitioner voices are central to the theorizing output, we present 10 DT leadership characteristics. Each characteristic links what action a DT leader needs to take and how a DT leader enables that action. We also asked 30 DT leaders to evaluate the importance of each of the 10 DT leadership characteristics. Our approach strengthens the relevance for practitioners striving for the best possible DT initiative outcome. For example, prefacing each DT leadership characteristic with “Are we…?” encourages DT leaders to guide conversations with organizational stakeholders by reflecting on the realities of their DT initiative and highlighting potential gaps in their organizational thinking.

Purpose The study aims to provide insights in the sensemaking process and the use of business analytics (BA) for project selection and prioritisation in start-up settings. A major focus is on the various ways start-ups can understand their data through the analytical process of sensemaking. Design/methodology/approach This is a comparative case study of two start-ups that use BA in their projects. The authors follow an interpretive approach and draw from the constructivist grounded theory method (GTM) for the purpose of data analysis, whereby the theory of sensemaking functions as the sensitising device that supports the interpretation of the data. Findings The key findings lie within the scope of project selection and prioritisation, where the sensemaking process is implicitly influenced by each start-up's strategy and business model. BA helps start-ups notice changes within their internal and external environment and focus their attention on the more critical questions along the lines of their processes, operations and business model. However, BA alone cannot support decision-making around less structured problems such as project selection and prioritisation, where intuitive judgement and personal opinion are still heavily used. Originality/value This study extends the research on BA applied in organisations as tools for business development. Specifically, the authors draw on the literature of BA tools in support of project management from multiple perspectives. The perspectives include but are not limited to project assessment and prioritisation. The authors view the decision-making process and the path from insight to value, as a sensemaking process, where data become part of the sensemaking roadmap and BA helps start-ups navigate the decision-making process.

In this paper, we use metaphors to capture the experiences of a group of five PhD supervisors (who have supervised) and three PhD graduates (who have completed) a Publication-Based Thesis (P-BT) within the Information Systems (IS) discipline. Our analysis leads to the emergence of five themes referred to as ART-IQ (Ambidexterity, Responsibility, Trust, Integrity, Quality). These five themes shine a light on the PhD supervisor/candidate relationship dynamic and are also core in theorising PhD supervision (in a P-BT context) as a sustainable leadership practice. Overall, we argue that viewing PhD supervision as sustainable leadership (in a P-BT context) suggests that the IQ (Integrity, Quality) is only achievable if the ART (Ambidexterity, Responsibility, Trust) elements are present.

VAR (Video Assistant Referee) is one of the most significant and controversial developments in world football. At its core, VAR is a decision-support system that aids referees to make more accurate decisions and eliminate clear and obvious errors. While current research highlights an increased level of accuracy, there have also been highly publicised errors, with fans having a mixed response. In an effort to gain a holistic understanding of VAR, this study undertakes a grounded theory approach to capture the socio-technical dynamics that have dominated the VAR implementation and use. The study focuses on the English Premier League (EPL) and examines over 2 years of news articles on VAR. Using open coding, 14 categories emerge, providing a comprehensive picture of the socio-technical dynamics. These categories are organised into 'Socio-Technical Context of the VAR Implementation' and 'Socio-Technical Impact of the VAR Implementation'. The paper concludes by stating several propositions that can be explored further.

Purpose Cyber security has never been more important than it is today in an ever more connected and pervasive digital world. However, frequently reported shortages of suitably skilled and trained information system (IS)/cyber security professionals elevate the importance of delivering effective Security Education,Training and Awareness (SETA) programmes within organisations. Therefore, the purpose of this study is the questionable effectiveness of SETA programmes at changing employee behaviour and an absence of empirical studies on the critical success factors (CSFs) for SETA programme effectiveness. Design/methodology/approach This exploratory study follows a three-stage research design to give voice to practitioners with SETA programme expertise. Data is gathered in Stage 1 using semi-structured interviews with 20 key informants (the emergence of the CSFs), in Stage 2 from 65 respondents to a short online survey (the ranking of the CSFs) and in Stage 3 using semi-structured interviews with nine IS/cyber security practitioners (the emergence of the guiding principles). Using a multi-stage research design allows the authors to propose and evaluate the 11 CSFs for SETA programme effectiveness. Findings This study conducted a mean score analysis to evaluate the level of importance of each CSF within two independent groups of IS/cyber security professionals. This multi-stage analysis produces a ranked list of 11 CSFs for SETA programme effectiveness, while the difference in the rankings leads to the emergence of five CSF-specific guiding principles (to increase the likelihood of delivering an effective SETA programme within an organisational context). This analysis also reveals that most of the contradictions/differences in CSF rankings between IS/cyber security practitioners are linked to the design phase of the SETA programme life cycle. While two CSFs, “maintain quarterly evaluation of employee performance” (CSF-DS6) and “build security awareness campaigns” (CSF-EV1), represent the most significant contradiction in this study. Originality/value The 11 CSFs for SETA programme effectiveness, along with the five CSF-specific guiding principles, provide a greater depth of knowledge contributing to both theory and practice and lays the foundation for future studies. Therefore, the outputs of this study provide valuable insights on the areas that practice needs to get right to deliver effective SETA programmes.

PurposeThis study explores the critical success factors (CSFs) for Security Education, Training and Awareness (SETA) program effectiveness. The questionable effectiveness of SETA programs at changing employee behavior and an absence of empirical studies on the CSFs for SETA program effectiveness is the key motivation for this study.Design/methodology/approachThis exploratory study follows a systematic inductive approach to concept development. The methodology adopts the “key informant” approach to give voice to practitioners with SETA program expertise. Data are gathered using semi-structured interviews with 20 key informants from various geographic locations including the Gulf nations, Middle East, USA, UK and Ireland.FindingsIn this study, the analysis of these key informant interviews, following an inductive open, axial and selective coding approach, produces 11 CSFs for SETA program effectiveness. These CSFs are mapped along the phases of a SETA program lifecycle (design, development, implementation and evaluation) and nine relationships identified between the CSFs (within and across the lifecycle phases) are highlighted. The CSFs and CSFs' relationships are visualized in a Lifecycle Model of CSFs for SETA program effectiveness.Originality/valueThis research advances the first comprehensive conceptualization of the CSFs for SETA program effectiveness. The Lifecycle Model of CSFs for SETA program effectiveness provides valuable insights into the process of introducing and sustaining an effective SETA program in practice. The Lifecycle Model contributes to both theory and practice and lays the foundation for future studies.

This study shares the direct experiences of designing and implementing methodological “learning-by-doing” for Action Design Research (ADR) within a 5-credit module that condenses the realities of completing a full ADR project without compromising the rigour of the approach. The module is described in detail, along with the specifics of its implementation over two years and the key learnings from doing so. Adopting a confessional writing approach, documented experiences from those involved (both designers and students) provide a rich data source, analysed using autonomous and communicative reflexivity. The underlying contribution of this paper is that it provides insights into the learning of ADR, the doing of ADR, and the outcomes of a technique that simultaneously combines both. As a result, ADR educators and researchers can draw on these insights to further their teaching, learning, and research endeavours. Finally, key insights such as forced pragmatism and the challenge of problematisation add to our understanding of conducting ADR while avoiding issues such as methodological slurring.