Approach to the Evaluation of a Method for the Adoption of Information Technology Governance, Risk Management and Compliance in the Swiss Hospital Environment

The issues, opportunities and challenges of effectively governing an organisation's Information Technology (IT) demands and resources have become a major concern of the Board and executive management in many organisations today. The Swiss health care is currently searching for methods and practices for the solution of operational planning and optimisation of IT processes. To make sure that the corporate hospital strategy leads to adequate business decisions an IT Governance, Risk and Compliance (GRC) Framework for Health Care will be needed. This paper presents a practically validation method for this approach. After the discussion of the challenges to the development of a validation method, the concept of triangulation as the basis for the method development will be applied to the given health care context. The proposed validation framework consists of different validation types which enables the evaluation of the research result compared to the cognizance goal and to the conditions of the real world.