Home / Current Issue / Paper 1722619
IT Governance Frameworks (COBIT/ITIL) and Their Impact on Regulatory Compliance in Nigerian Insurance Firms
Subject area: Science,Engineering and Technology · Area of research: IT Governance Frameworks
Abstract
This review examines how structured information technology governance and service-management practices can strengthen regulatory compliance, operational resilience, and digital accountability within Nigerian insurance firms. Its purpose is to evaluate the complementary roles of COBIT and ITIL, assess their relevance to technology-related regulatory obligations, and identify implementation conditions capable of improving governance maturity across the sector. A structured narrative review method was adopted, drawing on peer-reviewed scholarship, recognised governance frameworks, and relevant regulatory and professional literature published up to 2018. The analysis synthesised evidence on governance structures, internal controls, service management, cybersecurity, risk oversight, auditability, digital transformation, and compliance monitoring. The findings show that COBIT provides a robust architecture for strategic alignment, control ownership, risk optimisation, performance evaluation, and assurance, while ITIL strengthens operational reliability through incident, change, availability, continuity, and service-level management. Their integration offers a coherent governance-to-operations model through which regulatory expectations can be translated into measurable and auditable technology practices. However, implementation effectiveness is constrained by uneven governance maturity, legacy systems, skills shortages, infrastructure limitations, fragmented accountability, cybersecurity exposure, and the cost of sustained process improvement. The review concludes that successful adoption requires contextual tailoring rather than mechanical framework implementation. It recommends phased, risk-based COBIT–ITIL integration, stronger board and executive oversight, clearer control ownership, enhanced cybersecurity capability, continuous service-performance monitoring, and closer alignment between technology governance, internal audit, enterprise risk management, and regulatory reporting. Future research should empirically test how governance maturity influences compliance outcomes, service reliability, audit findings, operational performance, and regulatory costs within Nigerian insurance firms. Such evidence can support proportionate regulation and sustainable sector-wide digital resilience.
Keywords
COBIT; ITIL; IT governance; regulatory compliance; Nigerian insurance; digital governance.
How to cite this paper
@article{1722619,
author = {Samuel Fadero, Serif Oyindamola Oyesiji, Stanley Nwakamma, Demilade Jooda},
title = {IT Governance Frameworks (COBIT/ITIL) and Their Impact on Regulatory Compliance in Nigerian Insurance Firms},
journal = {Iconic Research And Engineering Journals},
year = {2018},
volume = {2},
number = {5},
pages = {478-496},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1722619.pdf},
abstract = {This review examines how structured information technology governance and service-management practices can strengthen regulatory compliance, operational resilience, and digital accountability within Nigerian insurance firms. Its purpose is to evaluate the complementary roles of COBIT and ITIL, assess their relevance to technology-related regulatory obligations, and identify implementation conditions capable of improving governance maturity across the sector. A structured narrative review method was adopted, drawing on peer-reviewed scholarship, recognised governance frameworks, and relevant regulatory and professional literature published up to 2018. The analysis synthesised evidence on governance structures, internal controls, service management, cybersecurity, risk oversight, auditability, digital transformation, and compliance monitoring.
The findings show that COBIT provides a robust architecture for strategic alignment, control ownership, risk optimisation, performance evaluation, and assurance, while ITIL strengthens operational reliability through incident, change, availability, continuity, and service-level management. Their integration offers a coherent governance-to-operations model through which regulatory expectations can be translated into measurable and auditable technology practices. However, implementation effectiveness is constrained by uneven governance maturity, legacy systems, skills shortages, infrastructure limitations, fragmented accountability, cybersecurity exposure, and the cost of sustained process improvement. The review concludes that successful adoption requires contextual tailoring rather than mechanical framework implementation.
It recommends phased, risk-based COBIT–ITIL integration, stronger board and executive oversight, clearer control ownership, enhanced cybersecurity capability, continuous service-performance monitoring, and closer alignment between technology governance, internal audit, enterprise risk management, and regulatory reporting. Future research should empirically test how governance maturity influences compliance outcomes, service reliability, audit findings, operational performance, and regulatory costs within Nigerian insurance firms. Such evidence can support proportionate regulation and sustainable sector-wide digital resilience.},
keywords = {COBIT; ITIL; IT governance; regulatory compliance; Nigerian insurance; digital governance.},
month = {November},
}