DIMENSIONAMIENTO DE LA RED

This section discusses the techniques used in the execution of this research. In doing so, sampling and participant profiles are briefly looked at.

5.5.1. Population

Choosing the right participants is an essential part of research. Participant selection is mainly influenced by the applicability of the information needed from relevant individuals by the researcher. Participants in this study were split into two: the first group was end-users of the information system in every target organisation, and then the second comprised ICT experts within and outside of the enterprises.

A total of 110 participants took part in this survey. Of the 110, 25 participants were independent ICT industry experts and the remainder system end-users from the three case organisations split as follows: 19 respondents from organisation X, 18 respondents from Organisation Y, and 30 respondents from organisation Z.

Staff in all participating organisations were targeted to better understand the applicability of information security digital divide. On the other hand, experts’ involvement would provide input on the relevance of the framework to the work environment.

5.5.2. Sampling and Sampling Frame

Sampling is the act of choosing a portion of a population with the intention of generalising the findings to the entire population sampled from (Kitchenham & Pfleeger, 2002). Sampling is applied in many types of research because in some cases, collecting information from the entire population is costly, time-consuming, and in most cases impossible. Tashakkori and Teddlie (2003) state that probability sampling techniques are key in quantitative-based research and involve selecting a relatively large number from a population or from specific subgroups of a population. To compound that, Teddlie and Yu (2007) go further to stipulate that probability sampling aim at getting as much representation as possible, which highly reflects the degree to which the sample accurately represents the overall population sampled from. In contrast to probability sampling, purposive sampling techniques are primarily used in qualitative research and are often about selecting a section of the sample

115

purposefully well-placed to aid in providing answers to the research question (Teddlie & Yu, 2007).

To get an accurate representation of both ICT experts and end-user populations, Systematic random sampling method was adapted in this research. Both samples were broken into intervals by taking the total target population and dividing by a number to create intervals. E.g organisation X had a total of 120 system end-users, we divided that by 4 to get 30 intervals which ensured a rational representation of end- users to take part in the survey, and the pattern was applied to the remaining two participating organisations. For ICT experts, they were also divided into 5 intervals by dividing the overal target population by 5 in order to increase the chances of a wide range of ICT expert representation. Information system end-users helped the researcher to determine the level of ISDD and measurement in the appropriateness of the information system, while ICT security expert engagement assisted in making the framework largely consensual.

A sampling frame in research refers to a record of the population from which a sample is taken (Singh, 2015). In simpler terms, it could be people or items forming a population from which these people or items are taken. ICT experts were the first sample. The second portion of the sample constituted all system end-users that interact with the systems of all the organisations, this included all external stakeholders such as suppliers, partners, contractors, customers, and consultants.

5.5.3. Data Preparation and Cleaning

Data preparation entails editing, coding and tabulating. In this research, data collected through the survey from ICT experts and end-users was of both a qualitative and quantitative nature. This data was logged in and checked for consistency and transformed into a format readable by tools which were used to manipulate and translate it into meaningful information that the researcher used to translate and interpret research findings in order to answer questions and reach objectives. A detailed explanation of data analysis will be provided in Chapter 6.

116

5.5.4. Validity and Reliability

Reliability in research entails the stability, equivalence, and consistency of a tool used to conduct research from one assessment to another (Roberts, Priest & Traynor, 2006). Primarily, if the same result can be replicated under a similar method, then the tool used can be considered reliable. This research took on the split-half concept whereby the Spearman-Brown prophecy formula was implemented and the outcome retained a coefficient equivalent to 0.74 as detailed earlier in section 1.9 which is a demonstration of the reliability and validity of the research method used over time.

5.5.5. Limitations

In addition to limitations discussed in Chapter 1 (Section 1.6) regarding the participation of only three organisations in this study and COBIT’s principles as the sole base reference framework, the intended sample was not met because some participants offered to take part but did not complete the questionnaires; this altered the envisaged outcome. In other few isolated cases in the last case organisation, respondents did not answer questionnaires in accurately and to the best of their ability due to time constraints, which made data analysis difficult.

5.5.6. Ethical Considerations

In addition to ethical considerations touched on in detail earlier in Chapter 1 (Section 1.10), high ethical standards were adhered to during this entire study. Permission in writing was sought from UNISA’s ethical clearance committee, and clearance was issued as per Appendix A. Also, permission was requested in writing from all three target organisations to perform surveys and collect all necessary data required to complete the research; all three organisations agreed to the requests in writing as well. All participants from various organisations were informed of what the research was about including its objectives. Participants were further enlightened on their rights to withdraw from participation if they felt uncomfortable or not willing at any point to continue with the participation. They all signed the consent form that is included in Appendix E.

117

5.5.7. Permission to Conduct Research

It is mandatory for institutions to make sure that all ethical review is in place and adhered to before giving any form of research a go-ahead in order to protect the integrity of organisations and respondents (Chilengi, 2009; Terre Blanche & Durrheim, 2002). In the context of this research, an application was made to the research ethics committee. The research ethics committee at University of South Africa reviews and grants permission to do research when ethics standards need to be met. Proof of application and approval for this research can be found in Appendix A.

5.5.8. Consent Forms

Any research conducted involving respondents must have an informed consent provision for the participants. In that respect, all participants who agreed to participate in this research were given a breakdown of what the research was about. Based on that, they willingly signed the consent forms to indicate their acceptance to participate. Further to that, they were made aware of the fact that they could withdraw at any given time if they felt uncomfortable and/or were not willing to continue with participation. A sample of the consent form can be found in Appendix D.

5.6 Conclusion

In this chapter, data collection was covered. First, the best research strategy applicable to this study’s research type was determined. Case studies, research instruments, sampling, and data description were then discussed. Details were also provided on both end-user and ICT expert’s questionnaire structures, the content of which is available in Appendix C. Furthermore, validation of questionnaires was touched on. The purpose of the chapter was to discuss tools aiming not only at testing the framework in a real-life context but also to validate it by using ICT experts for further improvement.

The chapter that follows will focus on the outcome of the ISDD maturity assessment of case enterprises and draw a conclusion as proof that the framework can indeed be relied on in a real-life context.

118